DS0-001 Data Governance And Security Practice Test 4 — 15 Questions

Question 1

Which TWO of the following are common administrative tasks in a Data Governance program?

Accepted Answer

Managing the data catalog metadata. Managing the data catalog metadata (B) is a core data governance administrative task because the catalog documents data assets, definitions, lineage, ownership, and stewardship information that governance relies on to make data discoverable and accountable. Conducting access rights certification (E) is also a common governance administrative task, as it periodically reviews and attests that users retain only the data access privileges appropriate to their roles, supporting least-privilege and compliance requirements. The other options fall outside data governance administration: updating the server operating system (A) is IT infrastructure/patch management, repairing broken network cables (C) is physical network maintenance, and optimizing database query performance (D) is database administration/tuning rather than governance of data policies, stewardship, or access accountability.

Answer

Updating the server operating system

Answer

Repairing broken network cables

Answer

Optimizing database query performance

Question 2

An organization must ensure that PII in a legacy SQL Server database is masked before being accessed by the HR analytics team. Which SQL Server feature should the DBA implement to ensure the data is obscured at the query level without changing the underlying storage?

Accepted Answer

Dynamic Data Masking (DDM). Dynamic Data Masking (DDM) in SQL Server is designed to obscure sensitive data at the query level without altering the underlying storage. It applies masking rules to specific columns, so users without UNMASK permission see masked values (e.g., partial credit card numbers or email addresses) while the actual data remains intact in the database. This is ideal for scenarios like HR analytics teams accessing PII, where the data must be usable but not fully visible.

Answer

Transparent Data Encryption (TDE)

Answer

Row-Level Security (RLS)

Answer

Always Encrypted

Question 3

You are implementing a data governance framework. Which role is primarily responsible for ensuring that the data quality, security, and lifecycle policies are defined and adhered to for a specific business domain?

Accepted Answer

Data Steward. A Data Steward is the role accountable for a specific business domain's data — defining and enforcing data quality rules, security classifications, and lifecycle policies for that domain. Stewards bridge business and IT, translating governance policy into domain-specific standards and monitoring adherence. This domain-scoped accountability is precisely what the question describes.

Answer

Database Administrator

Answer

Chief Data Officer

Answer

Data Architect

Question 4

A company is migrating to a cloud data warehouse and must comply with CCPA requirements for data portability. Which action is necessary to ensure compliance regarding user access requests?

Accepted Answer

Implement automated data export routines for individual user requests. CCPA grants California consumers the right to data portability, meaning they can request a copy of their personal information in a readily usable format. To comply at scale in a cloud data warehouse, the organization must implement automated data export routines that can locate and deliver an individual user's data upon request. This directly operationalizes the portability right, whereas the other options address security, retention, or availability rather than portability.

Answer

Enable multi-factor authentication for all warehouse users

Answer

Disable all logging of user activity to prevent PII leakage

Answer

Increase the frequency of full database backups

Question 5

A data engineer is configuring an S3 bucket to comply with GDPR requirements regarding the 'Right to be Forgotten.' Which combination of configuration settings best automates the lifecycle of user-specific data objects that have reached the end of their retention period?

Accepted Answer

S3 Lifecycle configuration with expiration rules. S3 Lifecycle configuration with expiration rules is the correct answer because it allows automated deletion of objects after a defined retention period, directly supporting GDPR's 'Right to be Forgotten' by ensuring user-specific data is removed without manual intervention. Lifecycle rules can be scoped by prefix or tag to target only the relevant user data, and expiration actions permanently delete objects, satisfying the regulatory requirement for timely erasure.

Answer

S3 Object Lock with legal hold

Answer

Cross-Region Replication (CRR)

Answer

Bucket policies with IAM conditions

Answer

S3 Inventory reports

Question 6

Which document is essential to establish the legal basis for processing personal data under GDPR between a controller and a processor?

Accepted Answer

Data Processing Agreement (DPA). A Data Processing Agreement (DPA) is the legally required contract under GDPR Article 28 that governs the relationship between a data controller and a data processor. It specifies the subject matter, duration, nature and purpose of processing, the type of personal data, categories of data subjects, and the obligations and rights of the controller. Without a DPA in place, the processing of personal data by a third party is unlawful under GDPR.

Answer

Service Level Agreement (SLA)

Answer

Acceptable Use Policy (AUP)

Answer

Data Privacy Impact Assessment (DPIA)

Question 7

You are auditing data security controls. You find that raw sensitive data is being written to application logs by the ETL process. Which remediation step best aligns with the principle of 'Data Minimization'?

Accepted Answer

Configure the logging framework to redact sensitive fields at the source. Data minimization requires collecting, processing, and storing only the data necessary for the intended purpose. Redacting sensitive fields at the source before they are written to logs ensures that unnecessary sensitive data is never persisted, directly aligning with data minimization by preventing the data from being captured in the first place.

Answer

Implement a log retention policy of 30 days

Answer

Restrict access to log files to senior engineers only

Answer

Encrypt the log files at rest using AES-256

Question 8

Which TWO of the following are recognized components of a mature Data Governance framework? (Select TWO)

Accepted Answer

Data Quality Standards. Data Quality Standards (A) are a recognized component of a mature Data Governance framework because governance defines the accuracy, completeness, consistency, and validity rules that data must satisfy, along with the metrics and accountability for enforcing them. Data Cataloging (C) is also a core governance component, as a catalog inventories data assets, captures metadata, lineage, and ownership, and enables discoverability and stewardship across the organization. By contrast, Office Security Badge Access (B) is a physical security control, not a data governance artifact. Hardware Procurement Policy (D) concerns IT asset acquisition and does not address data stewardship, quality, or metadata management. Network Throughput Monitoring (E) is an infrastructure performance activity unrelated to governing data definitions, ownership, or lifecycle.

Answer

Office Security Badge Access

Answer

Hardware Procurement Policy

Answer

Network Throughput Monitoring

Question 9

You are evaluating the data lifecycle of an organization's unstructured data. Which THREE actions should be included in a robust Data Retention and Disposal policy? (Select THREE)

Accepted Answer

Classifying data based on regulatory and business sensitivity. Option C is correct because a robust retention and disposal policy must begin with data classification, since regulatory and business sensitivity determines how long each data type must be kept and how it must be protected before disposal. Option D is correct because a legal hold process is essential to suspend scheduled deletion when data is relevant to litigation, audits, or investigations, overriding automatic expiration to avoid spoliation. Option E is correct because the policy must specify explicit expiration triggers (for example, time-based, event-based, or end-of-contract) and approved destruction methods (such as secure wiping, degaussing, shredding, or cryptographic erasure) to ensure defensible disposal. Option A does not belong because manual 24-hour backups are a backup and recovery control, not a retention or disposal action, and manual processes are not a policy requirement. Option B does not belong because migrating all data to off-site tape is a storage strategy, not a retention/disposal policy element, and blanket migration ignores classification-based retention requirements.

Answer

Creating manual backups every 24 hours

Answer

Automating the migration of all data to off-site tape storage

Question 10

As a Data Privacy Officer, you are reviewing technical controls for data security. Which TWO of the following are best practices to ensure 'Privacy by Design' in a new application? (Select TWO)

Accepted Answer

Ensuring that privacy settings are set to the most restrictive level by default. Option C is correct because Privacy by Design requires that the default state of any system protect the user, so privacy settings must default to the most restrictive level and require deliberate opt-in to share more data. Option D is correct because pseudonymization replaces direct identifiers with artificial keys, allowing realistic testing and analytics while reducing re-identification risk, which aligns with GDPR Article 25 data protection by design and by default. Option A is wrong because indexing improves query performance but does nothing to protect privacy, and trading encryption for speed directly undermines data security. Option B is wrong because maximizing metadata collection by default violates data minimization and purpose limitation principles. Option E is wrong because granting all developers root access to production databases breaks least-privilege and separation-of-duties controls, increasing breach and insider-threat risk.

Answer

Prioritizing high-performance database indexing over data encryption

Answer

Setting default configuration to capture maximum user metadata

Answer

Requiring all developers to have root access to the production database

Question 11

A healthcare analytics team stores patient records in a PostgreSQL database. Auditors require that any change to the 'diagnosis' column be traceable to a specific database user and timestamp, without relying on application-level logging. Which mechanism should the data engineer implement to meet this requirement?

Accepted Answer

Create an AFTER UPDATE trigger that writes old and new values plus current_user and now() into an audit table.. Database-level auditing is required when changes must be attributable to a specific user and timestamp independent of the application. An UPDATE trigger writing old and new values along with current_user and now() captures this at the engine, covering both application and direct SQL changes. Access controls and statement logging do not produce the per-change, queryable evidence the auditors demand.

Answer

Grant UPDATE on the diagnosis column only to a dedicated service role and revoke it from others.

Answer

Enable PostgreSQL row-level security policies on the patient table.

Answer

Configure PostgreSQL to write all statements to the server log with log_statement = 'all'.

Question 12

A financial services firm must prove to regulators that its nightly ETL job loaded the same source data that was archived for a given business date, and that no record was altered after extraction. Which combination of practices best provides this non-repudiation evidence?

Accepted Answer

Compute a cryptographic hash of the extracted dataset, store it with the archive, and re-verify the hash before and after loading.. Non-repudiation of an ETL load requires content-level integrity evidence, not just operational success signals or access controls. Hashing the extract, storing the digest with the archive, and re-verifying before and after load creates a verifiable chain proving the loaded data matches the archived source and was not altered. Exit codes, TLS, and certificate authentication cannot demonstrate content equality.

Answer

Enable TLS on the connection between the ETL server and the source database.

Answer

Require the ETL service account to authenticate with a client certificate and rotate it quarterly.

Answer

Store the ETL job's exit code and row counts in a control table after each run.

Question 13

A healthcare analytics team stores patient records in a PostgreSQL database. A new analyst joins and must be able to query only the columns patient_id, visit_date, and diagnosis_code from the encounters table, but must be blocked from viewing patient_name and ssn. Which mechanism should the database administrator implement to meet this requirement?

Accepted Answer

Create a view that selects only the permitted columns and grant SELECT on the view to the analyst while revoking table-level access.. Restricting an analyst to specific columns is achieved by creating a view that projects only the approved fields and granting SELECT on that view, while revoking direct table access. This enforces least privilege at the database layer and prevents the analyst from querying sensitive columns such as patient_name or ssn through the base table.

Answer

Enable row-level security (RLS) policies on the encounters table for the analyst role.

Answer

Apply Transparent Data Encryption (TDE) to the encounters table and share the encryption key with the analyst.

Answer

Grant SELECT on all columns of the encounters table and rely on the analyst to avoid selecting sensitive fields.

Question 14

A financial services firm is implementing a data governance program and must classify data assets. Which two characteristics are used to determine whether data should be classified as confidential under a typical data classification policy? (Choose two.)

Accepted Answer

The data contains personally identifiable information (PII) such as Social Security numbers or account numbers.. Confidential classification hinges on content and impact: data containing PII or whose disclosure would cause material harm warrants the confidential tier. Storage technology, access frequency, and age are operational attributes that do not determine sensitivity and therefore should not drive classification decisions.

Answer

The data is accessed by more than ten users per day.

Answer

The data is stored in a relational database rather than a NoSQL store.

Answer

The data is older than seven years and therefore archived.

Question 15

A retail company's data governance team is defining roles for its new data stewardship program. The team needs to assign responsibility for day-to-day management of data quality, including resolving data issues and documenting business rules. Which role should be assigned this responsibility?

Accepted Answer

Data steward. The data steward role is explicitly designed for operational data management: defining business rules, monitoring quality metrics, and resolving data issues within a domain. Other roles such as the CISO, DBA, and DPO have security, platform, and privacy mandates that do not include day-to-day data quality stewardship.

Answer

Chief Information Security Officer (CISO)

Answer

Database administrator (DBA)

Answer

Data protection officer (DPO)