DS0-001 Data Governance And Security Practice Test 5 — 15 Questions

Question 1

A financial institution is designing a data governance program. The Chief Data Officer wants to ensure that data quality issues are identified and resolved before data is used in regulatory reporting. The organization has multiple business units that each own their data. Which data governance component should be established to formally assign accountability for data quality and define escalation paths?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A data stewardship program with defined data owners and stewards for each domain.. Establishing a data stewardship program with data owners and stewards is the correct approach because it formally assigns accountability for data quality to specific roles within each business domain. This structure ensures that issues are identified and resolved by the responsible parties, with clear escalation paths. It aligns with data governance best practices by embedding ownership into the organization and enabling proactive management of data quality before regulatory reporting.

Answer

A master data management (MDM) system that consolidates data into a single golden record.

Answer

A data quality dashboard that monitors and reports on data quality metrics across business units.

Answer

A data lineage tool that tracks the flow of data from source to report.

Question 2

A multinational retailer stores customer loyalty data in a PostgreSQL cluster. Privacy counsel requires that EU customer records be purged automatically 30 days after account closure, while US records must be retained for seven years for tax purposes. Which data governance control best satisfies this requirement?

Accepted Answer

A scheduled job that deletes rows where region = 'EU' and closed_date is older than 30 days, with an audit log of each deletion.. Jurisdiction-specific retention requires an automated rule that deletes EU records past the 30-day window while preserving US records for the full tax period. A scheduled deletion scoped by region and closure date, plus an immutable audit trail, enforces the erasure obligation and produces the evidence auditors expect without disturbing the separate retention mandate.

Answer

Partition the table by region and detach the EU partition after 30 days, retaining the detached partition on cheaper storage.

Answer

A row-level security policy that hides EU records from analysts after 30 days while keeping them in the table for audit.

Answer

Encrypt EU records with a per-customer key and destroy the key after 30 days, rendering the ciphertext unreadable.

Question 3

A retail company is implementing a new data classification policy. The security team needs to categorize data based on its sensitivity and the impact of unauthorized disclosure. Which data classification level typically requires the highest level of protection and is subject to the strictest access controls?

Accepted Answer

Restricted. Restricted data represents the highest level of sensitivity in most classification schemes. It demands the strictest access controls because unauthorized disclosure could result in severe consequences, including legal penalties, financial loss, or harm to individuals. By classifying data as Restricted, organizations enforce need-to-know access, encryption, and auditing to protect it appropriately. This aligns with the scenario's requirement for the highest level of protection.

Answer

Public

Answer

Internal

Answer

Confidential

Question 4

A healthcare analytics team stores patient records in a PostgreSQL database. An auditor requires that any change to a patient's diagnosis code be permanently recorded with the identity of the user who made the change, and that this record cannot be altered or deleted by that same user. Which mechanism should the database administrator implement?

Accepted Answer

An append-only audit table populated by triggers. Auditability of modifications requires capturing the old and new values plus the acting user in a store that ordinary users cannot rewrite. Database triggers on the diagnosis table can write such records to a separate append-only audit table, and revoking UPDATE and DELETE on that table preserves integrity. Encryption and privilege restrictions limit access but generate no durable change history for the auditor.

Answer

Row-level security policies on the diagnosis table

Answer

Transparent data encryption on the tablespace

Answer

A column-level GRANT restricting diagnosis updates to the clinical role

Question 5

A healthcare analytics team stores patient records in a PostgreSQL database. A new compliance mandate requires that the database administrator be prevented from reading the contents of the 'diagnosis' column in plaintext, while the application must still be able to query and filter on that column. Which mechanism should the team implement?

Accepted Answer

Column-level encryption using a key managed by an external key management service, with the application performing encryption and decryption.. The requirement is to hide column contents from a privileged database administrator while retaining application query capability. Encrypting that column with keys held outside the database, and letting the application perform cryptographic operations, achieves both goals because the DBA only ever sees ciphertext. Engine-level encryption and access policies still expose plaintext to administrators, and monitoring is detective rather than preventive.

Answer

Transparent Data Encryption (TDE) at the tablespace level using the database engine's built-in key store.

Answer

Row-level security policies that restrict SELECT on the table to application service accounts only.

Answer

Database activity monitoring that alerts when the administrator queries the 'diagnosis' column.

Question 6

A financial services company is building a data governance program and must classify data assets so that protection controls map correctly to sensitivity. Which two actions are essential first steps in establishing data classification? (Choose two.)

Accepted Answer

Inventory data assets and assign an owner and a classification label to each identified asset.. Classification begins with agreed sensitivity tiers and a complete asset inventory that assigns owners and labels. Those two actions create the vocabulary and the record of what is sensitive, enabling controls, retention, and access decisions to be tied to data value and risk rather than applied blindly across all systems.

Answer

Deploy a data loss prevention tool that blocks outbound transfers of records matching regular expressions for account numbers.

Answer

Require multifactor authentication for all employees accessing any corporate system.

Answer

Encrypt every database at rest using the vendor's transparent data encryption feature.

Question 7

A data governance team is implementing an audit trail for a data warehouse. The team must ensure that every query against sensitive tables is recorded with the user identity, timestamp, and SQL text, and that the logs cannot be altered by database users. Which approach best meets these requirements?

Accepted Answer

Enable native database auditing and ship logs to a centralized, append-only log management system with restricted write access.. To capture every query with user identity and SQL text while ensuring tamper resistance, enable native database auditing and forward records to an append-only centralized log system. Local audit tables and triggers can be altered by privileged users, and encryption does not provide an audit trail.

Answer

Configure the database to write audit records to a local table and grant SELECT to auditors.

Answer

Use triggers on sensitive tables to insert rows into an audit table within the same schema.

Answer

Enable Transparent Data Encryption on the database and rely on encryption as the audit control.

Question 8

A multinational corporation is subject to the General Data Protection Regulation (GDPR). The data protection officer is reviewing the data lifecycle for customer personal data. Which two actions are required to comply with GDPR's data minimization and storage limitation principles? (Choose two.)

Accepted Answer

Implement a process to delete or anonymize personal data once the purpose for processing has been fulfilled.. GDPR's data minimization principle requires collecting only necessary personal data, while the storage limitation principle requires deleting or anonymizing data once its purpose is fulfilled. These two actions directly align with Article 5(1)(c) and (e). Implementing them reduces privacy risks and demonstrates accountability. The other options either violate GDPR (indefinite retention) or are unrelated to the specific principles of minimization and storage limitation.

Answer

Store all personal data in a single centralized database to simplify management.

Answer

Retain personal data indefinitely to support future analytics.

Answer

Encrypt all personal data at rest using AES-256.

Question 9

A retail company stores customer email addresses in a column named email_addr in an Oracle Database. A new privacy policy requires that analysts querying the table see a masked value such as j***@example.com, while the marketing application that sends campaigns must still read the real address. Which Oracle feature should the database administrator configure?

Accepted Answer

Oracle Data Redaction policy on the email_addr column. Oracle Data Redaction attaches a policy to a column and rewrites values returned by queries according to rules such as partial masking. Policies can target specific users or roles, so analysts receive masked email addresses while the marketing application schema is exempt and continues to read real values. Row-level and encryption controls do not produce per-role masked column output.

Answer

A CHECK constraint validating email_addr format

Answer

Virtual Private Database policies on the customers table

Answer

Transparent Data Encryption with a column encryption key

Question 10

A retail company is classifying its data assets for a new governance program. The legal team asks which category of data, if disclosed, would most directly trigger notification obligations under state breach-notification laws because it can identify a specific individual. Which classification should be applied?

Accepted Answer

Personally Identifiable Information (PII), because it can be linked to a specific person.. Breach-notification laws are triggered by unauthorized exposure of data that can identify a specific individual. PII, which includes direct identifiers like names and government numbers, is the classification that maps to those obligations. Public data, confidential business information, and system telemetry do not by themselves identify a person, so they do not drive the same notification duties in a retail governance program.

Answer

Public data, because it is already available to anyone.

Answer

System telemetry data, because it records user activity.

Answer

Confidential business data, because it affects competitive advantage.

Question 11

A cloud data platform team must prove to auditors that only approved personnel accessed a regulated dataset during a specific incident window. The platform uses role-based access control and stores query history in the warehouse. Which evidence source most directly demonstrates authorized access during that window?

Accepted Answer

The warehouse access history and query logs filtered to the dataset and incident window, correlated with role grants.. Auditors need object-level access evidence tied to identities and time. Warehouse access history and query logs filtered to the dataset and incident window, correlated with the role grants in effect, show exactly which principals read the regulated data and whether each read was authorized, which is the most direct and defensible proof.

Answer

The change management tickets approved during the incident window for the platform team.

Answer

The data catalog's lineage graph showing which downstream reports consume the regulated dataset.

Answer

The identity provider's sign-in logs showing which users authenticated and from which IP addresses.

Question 12

A cloud-based SaaS provider stores customer data in a multi-tenant database. The provider wants to ensure that a customer's data is logically isolated from other customers' data, even though they share the same database schema. Which security control should be implemented to enforce this isolation?

Accepted Answer

Row-level security (RLS) policies that filter data based on the tenant identifier.. Row-level security policies enforce logical isolation by automatically filtering rows based on the tenant identifier. This ensures that each customer can only access their own data within the shared database. RLS is a proven approach for multi-tenant applications because it centralizes access control at the database layer, reducing the risk of application-level bugs that could expose cross-tenant data. It directly satisfies the requirement for logical isolation without altering the shared schema.

Answer

Network segmentation using virtual private clouds (VPCs) for each tenant.

Answer

Column-level encryption with separate keys for each tenant.

Answer

A separate database instance for each tenant.

Question 13

A financial services firm is designing a new data warehouse that will hold account balances and transaction histories. The governance committee wants to formalize who owns each data domain, who is accountable for its quality, and how stewardship duties are delegated across business units. Which artifact should the data governance lead produce first to establish these assignments?

Accepted Answer

A RACI chart for data domains. Establishing ownership and accountability requires an explicit mapping of data domains to roles. A RACI chart names who is responsible, who is accountable, who must be consulted, and who is informed for each domain, which is precisely the governance assignment the committee wants. Classification, retention, and metadata structures support governance but do not assign domain ownership or quality accountability.

Answer

A data classification matrix

Answer

A data retention schedule

Answer

A metadata repository schema

Question 14

A new data engineer joins a team and needs read access to a production analytics database to troubleshoot a reporting issue. The security policy requires least privilege and time-bound access. Which approach best meets the policy?

Accepted Answer

Grant the engineer temporary read access to the specific schemas needed, with an expiration set at the end of the troubleshooting window.. Time-bound, scoped grants align access with the actual task and remove it automatically when the work ends. Granting read access only to the schemas needed for the reporting issue, with an expiration, enforces least privilege and creates auditable evidence that privileged access was both justified and temporary.

Answer

Grant the engineer the same read-only role used by the analytics team, with no expiration.

Answer

Add the engineer to the database's superuser group so they can inspect any object during troubleshooting.

Answer

Share the credentials of an existing read-only service account with the engineer for the duration of the task.

Question 15

A multinational bank must demonstrate that its data processing activities are lawful and documented. An auditor requests evidence that each processing purpose has a documented legal basis, defined retention, and identified data subjects. Which artifact should the data governance team produce?

Accepted Answer

A Record of Processing Activities (ROPA) maintained under GDPR Article 30.. The auditor wants per-purpose evidence of lawful basis, retention, and data-subject categories. That is the definition of a Record of Processing Activities, which governance teams maintain as the authoritative register for accountability. Diagrams, classification matrices, and continuity plans support related controls but do not contain the specific legal and retention attributes the auditor requested.

Answer

A network diagram showing where personal data flows between systems.

Answer

A data classification matrix that labels each column as public, internal, or confidential.

Answer

A business continuity plan describing recovery time objectives for core systems.