mediumMultiple SelectObjective-mapped
CAS-004 Practice Question: Which TWO of the following are essential elements…
Which TWO of the following are essential elements of an effective data governance framework?
⚠ Common exam trap
A common pitfall is confusing data governance framework elements (policies, roles) with operational or technical controls. Remember that governance establishes the rules and accountability, not the specific tools or regulations like data localization or encryption.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data classification policies and procedures
Data classification policies and procedures (Option A) are essential for determining how data should be handled based on sensitivity, while assignment of data stewardship roles (Option C) ensures accountability and ownership. These are core governance elements. Mandatory data localization (Option B) is a regulatory requirement, not a governance framework element. Automated breach notification (Option D) is an operational response process. Full-disk encryption (Option E) is a technical control, not governance. Therefore, the correct answers are A and C.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data classification policies and procedures
Why this is correct
Classification is foundational to governance.
- ✗
Mandatory data localization requirements
Why it's wrong here
Data localization is a specific regulatory requirement.
- ✓
Assignment of data stewardship roles
Why this is correct
Stewardship assigns accountability.
- ✗
Automated breach notification system
Why it's wrong here
Breach notification is an operational capability.
- ✗
Implementation of full-disk encryption on all endpoints
Why it's wrong here
Encryption is a technical control.
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.