Courseiva

CompTIA DataSys+ (DS0-001) (DS0-001) (DS0-001) — Questions 1–75

303 questions total · 5 pages · All types, answers revealed

Page 1 of 5

Page 2
1
MCQeasy

A junior data analyst runs the following query against a retail sales table and receives 42,000 rows instead of the expected 12,000: SELECT c.customer_id, c.customer_name, o.order_id FROM customers c LEFT JOIN orders o ON c.customer_id = o.customer_id WHERE o.order_status <> 'cancelled'; Which action should the analyst take to return all customers, including those with no orders, while still excluding cancelled orders?

A.Change the WHERE clause to WHERE o.order_status <> 'cancelled' OR o.order_status IS NULL.
B.Add DISTINCT to the SELECT list to eliminate duplicate customer rows.
C.Replace LEFT JOIN with INNER JOIN and keep the WHERE clause unchanged.
D.Move the o.order_status <> 'cancelled' condition into the ON clause of the LEFT JOIN.
AnswerD

Placing the filter in the ON clause preserves all rows from the left table, so customers with no orders still appear with NULL order values, while cancelled orders are excluded from the join matches. The result set includes every customer and only non-cancelled orders, which matches the stated requirement exactly. Filtering in the WHERE clause instead converts the outer join into an inner join.

Why this answer

In a LEFT JOIN, predicates placed in the WHERE clause are evaluated after the join and remove rows where the right-side column is NULL, effectively turning the outer join into an inner join. Moving the status filter into the ON clause restricts which orders are matched without discarding customers who have no orders. This is the standard fix for returning all customers while excluding cancelled orders.

Exam trap

The trap here is assuming that a WHERE clause filter on the right table of a LEFT JOIN behaves the same as a filter in the ON clause, when it actually eliminates the unmatched left rows.

2
MCQmedium

You need to change the collation of a database. What is the impact of performing this operation?

A.It can be done instantly with an ALTER command
B.It is a metadata-only change
C.It requires rebuilding the database or recreating tables
D.It only impacts system tables
AnswerC

Collation governs how character data is sorted, compared and stored at the column and database level. Changing it alters those stored comparison rules, so existing data must be rewritten. SQL Server therefore rebuilds the database or recreates the affected tables to apply the new collation.

Why this answer

Changing a database's collation is not a simple metadata update; it affects how data is stored, compared, and sorted. In most database systems (e.g., SQL Server, MySQL), altering collation requires rebuilding the database or recreating tables and indexes, because existing data must be converted to the new collation's encoding and comparison rules.

Exam trap

DS0-001 often tests the misconception that collation changes are trivial metadata updates, when in fact they require data conversion and can impact performance, storage, and query results.

How to eliminate wrong answers

Option A is wrong because an ALTER command alone cannot instantly change collation for existing data; it may change the default for new objects but not existing columns. Option B is wrong because collation is not metadata-only; it impacts data storage and comparison behavior, requiring data conversion. Option D is wrong because collation affects all character-based columns and indexes, not just system tables.

3
MCQhard

A database administrator is deploying a new Microsoft SQL Server 2022 instance that will host a mission-critical OLTP database. The business requires zero data loss and automatic failover to a secondary server in a different subnet within the same data center. The administrator needs to configure a high-availability solution that supports automatic failover and synchronous commit. Which solution should the administrator implement?

A.Configure a failover cluster instance (FCI) with shared storage between the two servers.
B.Configure database mirroring in high-safety mode with automatic failover.
C.Configure log shipping with a short transaction log backup interval and automatic failover.
D.Configure an Always On availability group with synchronous-commit mode and automatic failover.
AnswerD

Always On availability groups support synchronous-commit mode, which ensures zero data loss, and can be configured for automatic failover. They do not require shared storage, and they support replicas on different subnets within the same data center. This solution meets the zero data loss and automatic failover requirements.

Why this answer

The requirement for zero data loss and automatic failover in SQL Server 2022 points to Always On availability groups with synchronous-commit mode. This feature supports automatic failover without shared storage and works across different subnets. Failover cluster instances require shared storage, log shipping is manual, and database mirroring is deprecated.

Exam trap

The trap here is selecting a deprecated or manual failover technology like database mirroring or log shipping, which cannot meet the automatic failover and zero data loss requirements in SQL Server 2022.

4
MCQeasy

During the testing phase of a database deployment, you discover that the database is not accepting external connections. You have verified that the database service is running. What is the most likely culprit?

A.The backup agent is running.
B.The host firewall is blocking the database port.
C.The database schema is not fully migrated.
D.The database is in Single User mode.
AnswerB

A running service that refuses external connections typically means the port is filtered before reaching it. The host firewall dropping inbound traffic on the database port satisfies the verified-running-service constraint, since the listener itself is healthy but packets never arrive.

Why this answer

If the database service is confirmed running but external connections are refused, the most likely cause is a host firewall blocking the database's listening port (e.g., 1433 for SQL Server, 3306 for MySQL, 5432 for PostgreSQL). The firewall operates at the network layer and silently drops or rejects inbound traffic before it ever reaches the database engine, producing exactly this symptom.

Exam trap

DS0-001 often tests layered troubleshooting, and the trap is jumping to database-internal causes like Single User mode or schema issues when the symptom (service running but no external connections) points to a network-layer block.

How to eliminate wrong answers

Option A is wrong because a running backup agent consumes resources but does not prevent the database from accepting external connections — it operates independently of the listener. Option C is wrong because an incomplete schema migration would cause application-level errors (missing tables, columns) after a successful connection, not a connection refusal. Option D is wrong because Single User mode would typically allow one connection (often the admin) and reject others with a specific error, but the question states the service is running and external connections are refused entirely — a firewall block is more consistent with a total refusal.

5
MCQhard

A developer needs to ensure that a 'Customer_ID' field in a 'Orders' table always references a valid ID in the 'Customers' table. Which constraint should be applied?

A.PRIMARY KEY
B.UNIQUE
C.CHECK
D.FOREIGN KEY
AnswerD

A FOREIGN KEY enforces referential integrity by requiring every Customer_ID value in Orders to match an existing primary key in Customers, rejecting inserts or updates that reference a non-existent customer. This directly satisfies the stem's requirement that the field always reference a valid ID.

Why this answer

A FOREIGN KEY constraint is used to enforce referential integrity between two tables. It ensures that the Customer_ID in the Orders table matches an existing ID in the Customers table, preventing orphaned records and maintaining consistent relationships.

Exam trap

DS0-001 often tests the confusion between PRIMARY KEY (uniqueness within a table) and FOREIGN KEY (referential integrity across tables), catching candidates who overlook the cross-table requirement.

How to eliminate wrong answers

Option A is wrong because a PRIMARY KEY uniquely identifies each row in its own table and cannot reference another table. Option B is wrong because a UNIQUE constraint ensures uniqueness within a single table but does not enforce cross-table references. Option C is wrong because a CHECK constraint validates data against a logical expression (e.g., range or format) but cannot reference another table's data.

6
MCQhard

A database architect is tasked with choosing a database model for a system that requires highly variable, semi-structured data storage (e.g., JSON documents). Which model provides the best flexibility for this requirement?

A.Key-Value
B.Relational (RDBMS)
C.Document-oriented
D.Graph
AnswerC

Document-oriented databases store each record as a self-describing JSON-like document, so fields can vary between records without schema migrations. This directly satisfies the stem's requirement for highly variable, semi-structured data, unlike relational tables with fixed columns or key-value stores that lack queryable nested structure.

Why this answer

Document-oriented databases store data in flexible, semi-structured formats like JSON or XML, allowing for schema-less design and easy evolution of data structures. This makes them ideal for highly variable data such as JSON documents.

Exam trap

DS0-001 often tests the appropriate database model for specific data characteristics, and candidates may confuse document-oriented with key-value or graph databases.

How to eliminate wrong answers

Option A is wrong because Key-Value stores are simple and efficient for basic key-based retrieval but do not support complex queries or indexing on document contents, making them less flexible for semi-structured data. Option B is wrong because Relational databases require a fixed schema and are not well-suited for highly variable, semi-structured data. Option D is wrong because Graph databases are optimized for relationships between entities, not for storing and querying semi-structured documents.

7
MCQeasy

A database administrator is deploying a new SQL Server instance that will host a data warehouse. The instance must store data and log files on separate physical volumes to maximize performance and simplify backup operations. The server has four drive letters available: C, D, E, and F. The administrator wants to ensure that tempdb is also isolated. Which configuration should the administrator use?

A.Place all files on a single volume with RAID 5.
B.Place data files on C, log files on C, and tempdb on D.
C.Place data and log files on D, and tempdb on C.
D.Place data files on C, log files on D, and tempdb on E.
AnswerD

Separating data, log, and tempdb files onto distinct physical volumes reduces I/O contention and improves performance. The log volume should be dedicated because log writes are sequential and critical for durability. Placing tempdb on its own volume prevents heavy tempdb usage from competing with user database I/O. This matches the stated requirement to isolate data, log, and tempdb.

Why this answer

The best practice is to isolate data, log, and tempdb files on separate physical volumes. This reduces I/O contention, improves write performance for the log, and prevents tempdb activity from affecting user databases. The configuration that places data on C, log on D, and tempdb on E satisfies all isolation requirements with the available drives.

Exam trap

The trap here is thinking that RAID redundancy alone is sufficient and that separating files across volumes is unnecessary, when I/O isolation is the actual goal.

8
MCQhard

A database administrator is designing a schema for a financial application that must enforce that every account balance is never negative. The application inserts and updates balances frequently, and the DBA wants the rule enforced at the database level regardless of which application or script performs the change. Which database object should the DBA create to enforce this rule?

A.A stored procedure that all applications must call to modify balances.
B.A foreign key constraint referencing a Balances lookup table that contains only non-negative values.
C.A CHECK constraint on the Balance column that verifies Balance >= 0.
D.A trigger on the table that rolls back any transaction resulting in a negative balance.
AnswerC

A CHECK constraint is a declarative database object that validates data on every INSERT and UPDATE, regardless of the client. Defining Balance >= 0 ensures the rule is enforced at the storage engine level, cannot be bypassed by application code, and applies uniformly to all statements. This is the standard, most efficient way to enforce a simple domain rule like non-negative balances.

Why this answer

A CHECK constraint is the appropriate database object because it declaratively enforces a Boolean condition on column values during every INSERT and UPDATE. It cannot be bypassed by applications or ad-hoc scripts, and the database engine optimizes its evaluation. Stored procedures and triggers can enforce rules procedurally but are more complex and, in the case of stored procedures, easily bypassed.

A foreign key addresses referential integrity, not numeric ranges.

Exam trap

The trap here is choosing a trigger or stored procedure for a simple domain rule, overlooking that a declarative CHECK constraint enforces the condition universally with less overhead.

9
MCQhard

A database administrator is deploying a new database that will store sensitive customer data. The organization requires that all data at rest be encrypted using AES-256. The database supports Transparent Data Encryption (TDE). After enabling TDE, what additional step must be performed to ensure that the encryption keys are protected and can be recovered in case of a disaster?

A.Configure a Database Master Key (DMK) for the master database.
B.Enable encryption of the tempdb system database.
C.Back up the TDE certificate and its private key to a secure location.
D.Back up the database master key and the service master key to a secure location.
AnswerC

TDE encrypts the database encryption key (DEK) with a certificate stored in the master database. To recover an encrypted database on a different server or after a disaster, you must have a backup of the certificate and its private key. Without it, the database cannot be decrypted, resulting in permanent data loss.

Why this answer

When using Transparent Data Encryption, the database encryption key is protected by a certificate. To ensure recoverability, you must back up the certificate and its private key. This backup allows you to restore the encrypted database on another server or after a disaster.

Without it, the data is irrecoverable.

Exam trap

The trap here is focusing on master keys or tempdb encryption while overlooking the specific certificate and private key backup required for TDE recovery.

10
MCQmedium

In PostgreSQL, you need to monitor the performance of your long-running queries. Which view is the most appropriate to inspect the query execution statistics for all active sessions?

A.pg_stat_database
B.pg_locks
C.pg_stat_user_tables
D.pg_stat_activity
AnswerD

`pg_stat_activity` exposes one row per server process, including `state`, `query_start`, and the currently executing `query` text, so it reveals which sessions are actively running long queries. This directly satisfies the requirement to inspect execution statistics across all active sessions, unlike cumulative `pg_stat_statements` aggregates.

Why this answer

pg_stat_activity is the PostgreSQL system view that shows one row per server process, including the current query text, state (active, idle, idle in transaction), wait events, and timing information for every active session. It is the canonical view for monitoring long-running queries and session-level activity.

Exam trap

DS0-001 often tests whether candidates can distinguish session-level monitoring views (pg_stat_activity) from aggregate or object-level views (pg_stat_database, pg_stat_user_tables), since all share the pg_stat_ prefix.

How to eliminate wrong answers

Option A (pg_stat_database) is wrong because it aggregates statistics per database (commits, rollbacks, tuples fetched) rather than exposing individual query or session details. Option B (pg_locks) is wrong because it only shows lock information — useful for diagnosing blocking, but not query execution statistics. Option C (pg_stat_user_tables) is wrong because it reports table-level access statistics (sequential scans, index scans, dead tuples) rather than per-session query activity.

11
MCQhard

A data analyst is working with a dataset that contains a column with values such as 'N/A', 'null', ' ', and 'unknown'. The analyst needs to count the number of truly missing values in this column. Which approach is most appropriate?

A.Use a query that counts rows where the column = ''.
B.Use a query that counts rows where the column IS NULL.
C.Use a query that counts rows where the column IS NULL OR column IN ('N/A', 'null', 'unknown', ' ').
D.Use a query that counts rows where the column IS NOT NULL.
AnswerC

This approach accounts for both true NULLs and common placeholder strings that represent missing data. By explicitly listing these values in an IN clause along with IS NULL, the analyst captures all instances of missing information. This is the most comprehensive method for counting truly missing values in this dataset.

Why this answer

Missing data can be represented by NULLs or by placeholder strings such as 'N/A', 'null', 'unknown', or blank spaces. To accurately count missing values, the query must include both IS NULL and an IN list of the known placeholders. This ensures all forms of missing data are captured in the count.

Exam trap

The trap here is assuming that missing data is only represented by NULL, ignoring common placeholder strings that also indicate missing values.

12
MCQeasy

Which SQL statement is used to remove a table entirely from the database?

A.DELETE TABLE
B.REMOVE TABLE
C.TRUNCATE TABLE
D.DROP TABLE
AnswerD

DROP TABLE deletes the table's definition and all its data, removing the object from the schema entirely. This satisfies the stem's requirement to remove the table itself, unlike DELETE, which removes rows while preserving the table structure, or TRUNCATE, which empties data but keeps the table.

Why this answer

The SQL statement used to remove a table entirely from the database is DROP TABLE. This command deletes the table definition, all data, and associated indexes, triggers, and permissions. It is a Data Definition Language (DDL) operation and cannot be rolled back in most databases once committed.

Exam trap

DS0-001 often tests the difference between DROP, DELETE, and TRUNCATE, causing candidates to confuse the removal of data with the removal of the table structure.

How to eliminate wrong answers

Option A is wrong because DELETE TABLE is not valid SQL syntax; DELETE is used to remove rows from a table, not the table itself. Option B is wrong because REMOVE TABLE is not a valid SQL command. Option C is wrong because TRUNCATE TABLE removes all rows from a table but leaves the table structure intact for future use.

13
MCQmedium

An administrator is deploying a new database and needs to ensure that the backup strategy complies with the '3-2-1' backup rule. What does the '1' in this rule represent?

A.One recovery point objective (RPO) of zero
B.One local copy
C.One full backup per day
D.One off-site copy
AnswerD

One copy must be stored off-site, physically separate from the primary and secondary copies. This satisfies the geographic separation constraint of the 3-2-1 rule, protecting backups against site-level disasters such as fire, flood or theft that would otherwise destroy every local copy simultaneously.

Why this answer

The 3-2-1 backup rule states: keep at least 3 copies of data, on 2 different media types, with 1 copy stored off-site. The '1' specifically refers to the off-site copy, which protects against site-wide disasters such as fire, flood, or ransomware that could destroy all local copies simultaneously.

Exam trap

DS0-001 often tests the 3-2-1 rule by swapping in adjacent backup concepts like RPO, frequency, or local copies, and the trap is confusing the off-site requirement with other backup terminology.

How to eliminate wrong answers

Option A is wrong because RPO (Recovery Point Objective) is a separate concept defining acceptable data loss measured in time, not part of the 3-2-1 rule. Option B is wrong because 'one local copy' inverts the rule — the rule requires copies to be distributed, with at least one off-site, not consolidated locally. Option C is wrong because backup frequency (one full backup per day) is a scheduling decision, not what the '1' in 3-2-1 represents.

14
MCQhard

A retail company stores customer email addresses in a column named email_addr in an Oracle Database. A new privacy policy requires that analysts querying the table see a masked value such as j***@example.com, while the marketing application that sends campaigns must still read the real address. Which Oracle feature should the database administrator configure?

A.A CHECK constraint validating email_addr format
B.Oracle Data Redaction policy on the email_addr column
C.Virtual Private Database policies on the customers table
D.Transparent Data Encryption with a column encryption key
AnswerB

Oracle Data Redaction applies a policy to a column so that queries return transformed values, such as partial masking, full masking, or randomized output, without changing stored data. A policy can be scoped to the analyst role while exempting the marketing application schema, letting campaign sends read the actual address. This matches the requirement precisely without duplicating or encrypting the underlying column.

Why this answer

Oracle Data Redaction attaches a policy to a column and rewrites values returned by queries according to rules such as partial masking. Policies can target specific users or roles, so analysts receive masked email addresses while the marketing application schema is exempt and continues to read real values. Row-level and encryption controls do not produce per-role masked column output.

Exam trap

The trap here is confusing row-level access control, which hides whole rows, with column redaction, which transforms values within a visible row for selected users.

15
MCQeasy

Which access control model should be implemented to ensure that a user can only access files based on their specific job role?

A.Discretionary Access Control (DAC)
B.Role-Based Access Control (RBAC)
C.Mandatory Access Control (MAC)
D.Network Access Control (NAC)
AnswerB

Role-Based Access Control grants permissions according to a user's job role, so access to files is determined by role membership rather than individual ownership or arbitrary attributes. This satisfies the requirement that users access only files relevant to their role.

Why this answer

RBAC assigns permissions to roles (e.g., 'HR Analyst', 'Finance Approver') rather than to individual users, and users inherit permissions by being assigned to a role. This directly satisfies the requirement that access be driven by job role, and it scales cleanly when employees change positions — you swap roles rather than re-editing per-file ACLs.

Exam trap

DS0-001 often tests the DAC vs. RBAC vs. MAC distinction by using the phrase 'job role' — candidates who pick DAC because 'the owner decides' or MAC because 'it's the most secure' miss that role-based mapping is the defining characteristic of RBAC.

How to eliminate wrong answers

Option A is wrong because DAC lets the resource owner set permissions at their discretion, which produces inconsistent, owner-dependent access that does not map to job roles and is hard to audit. Option C is wrong because MAC uses system-enforced labels (e.g., Bell-LaPadula, SELinux contexts) based on clearance levels, not job function — it's overkill and misaligned with role-based business logic. Option D is wrong because NAC governs whether a device can join the network (802.1X, posture checks), not which files a user can read once on the network.

16
Multi-Selectmedium

Which THREE of the following are valid methods to improve database performance for read-heavy workloads?

Select 3 answers
A.Create read-only replicas
B.Create covering indexes
C.Increase the number of write threads
D.Enable synchronous replication
E.Implement query caching
AnswersA, B, E

Read-only replicas copy data to additional nodes that serve SELECT traffic, spreading read load away from the primary. This parallelises read capacity and reduces contention on the primary, directly addressing the read-heavy workload constraint in the scenario.

Why this answer

Option A (Create read-only replicas) is correct because read replicas offload SELECT traffic from the primary database, allowing reads to be distributed across multiple nodes and improving throughput for read-heavy workloads. Option B (Create covering indexes) is correct because a covering index contains all columns required by a query, letting the database satisfy the query entirely from the index without touching the base table, drastically reducing I/O for frequent read queries. Option E (Implement query caching) is correct because caching the results of frequently executed read queries avoids repeated database work and returns results faster, directly benefiting read-heavy patterns.

Option C (Increase the number of write threads) does not belong because it targets write throughput, not read performance, and can even contend with reads. Option D (Enable synchronous replication) does not belong because synchronous replication waits for replicas to acknowledge writes, adding latency and reducing write performance rather than improving read-heavy workloads.

Exam trap

DS0-001 often tests whether candidates confuse write-side scaling mechanisms (more write threads, synchronous replication) with read-side optimizations, since both sound like general 'performance improvements.'

17
MCQmedium

A developer wants to use a subset of production data for testing. Which method ensures the test data retains its structure while protecting privacy?

A.Database Snapshotting
B.Database Migration
C.Data Masking/De-identification
D.Full Database Clone
AnswerC

Masking replaces sensitive values while preserving column types, formats and referential relationships, so the test subset keeps production structure. This satisfies the stem's dual constraint: realistic structure for testing plus privacy protection, unlike full data fabrication or simple row sampling.

Why this answer

Data masking (de-identification) replaces sensitive values with realistic but fictitious data while preserving the schema, data types, and referential relationships. This lets developers test against production-like structures without exposing real PII, satisfying both usability and privacy requirements.

Exam trap

DS0-001 often tests whether candidates confuse data-protection mechanisms (masking) with data-availability mechanisms (snapshots, clones), so the trap is picking 'Full Database Clone' because it sounds like it gives a complete, usable test environment.

How to eliminate wrong answers

Option A is wrong because snapshotting copies the database at a point in time, including all real sensitive data — it protects recoverability, not privacy. Option B is wrong because migration moves data between systems or versions without altering its sensitivity, so PII remains exposed. Option D is wrong because a full clone replicates production data verbatim, which is exactly the privacy risk the question asks to avoid.

18
MCQhard

A database administrator is designing a table to store product inventory. The table must enforce that each product has a unique SKU and that the quantity_on_hand column never drops below zero. The administrator adds a PRIMARY KEY constraint on SKU and a CHECK constraint on quantity_on_hand. A developer then tries to insert a row with a NULL SKU and a negative quantity. Which statement describes the outcome?

A.The insert succeeds because CHECK constraints are evaluated only on UPDATE, not INSERT.
B.The insert fails only because of the negative quantity; the NULL SKU is allowed because PRIMARY KEY does not enforce NOT NULL.
C.The insert fails because the PRIMARY KEY constraint rejects NULL values, and the CHECK constraint rejects negative values.
D.The insert succeeds with a warning because NULL values bypass PRIMARY KEY enforcement.
AnswerC

A PRIMARY KEY constraint implicitly includes NOT NULL, so a NULL SKU is rejected. Separately, the CHECK constraint on quantity_on_hand rejects the negative value. Both violations occur, and the database will report an error for at least one of them, preventing the insert. This is the correct behavior because both constraints are enforced at insert time in standard SQL, ensuring data integrity for unique and non-negative inventory values.

Why this answer

PRIMARY KEY constraints enforce uniqueness and implicitly disallow NULLs, while CHECK constraints validate that column values meet a Boolean condition on both INSERT and UPDATE. In this scenario, the NULL SKU violates the primary key, and the negative quantity violates the check constraint, so the insert is rejected. Both constraints work together to maintain data integrity.

Exam trap

The trap here is believing that PRIMARY KEY constraints permit NULL values or that CHECK constraints only apply to updates, when in fact both are enforced on insert.

19
MCQhard

A database architect is designing a schema for a high-volume transaction system. The system requires strict data consistency and supports complex queries with multiple joins. The architect must choose between a normalized relational model and a denormalized model. Which approach is most appropriate and why?

A.Use a denormalized model to reduce the number of joins and improve read performance, accepting some data redundancy.
B.Use a NoSQL document store to handle high volume and avoid joins altogether.
C.Use a star schema with fact and dimension tables to optimize complex queries, as it is a form of denormalization.
D.Use a normalized relational model to minimize redundancy and ensure data integrity, while adding indexes to optimize join performance.
AnswerD

A normalized model reduces data redundancy and maintains consistency, which is critical for transactional systems. Complex queries with joins can be optimized with proper indexing. This approach aligns with the need for strict consistency and supports complex queries without sacrificing integrity.

Why this answer

A normalized relational model is best suited for high-volume transaction systems that require strict consistency and complex queries. It minimizes redundancy and maintains integrity, while indexes can address join performance. Denormalization or NoSQL alternatives compromise consistency or join capabilities.

Exam trap

The trap here is assuming that denormalization always improves performance, overlooking the need for strict consistency and complex joins in transactional systems.

20
Multi-Selecthard

An administrator needs to improve the security posture of a newly deployed PostgreSQL database. Which TWO actions should be performed to harden the environment?

Select 2 answers
A.Enable the 'trust' authentication method for all users.
B.Modify pg_hba.conf to allow only specific IP addresses to connect.
C.Grant 'superuser' privileges to all application service accounts.
D.Change the default database port to a random high number for security through obscurity.
E.Set the password_encryption parameter to 'scram-sha-256'.
AnswersB, E

Restricting connections in pg_hba.conf to specific IP addresses enforces network-level access control at the database layer, satisfying the hardening requirement by rejecting connections from unauthorised hosts before authentication. This limits the attack surface of the newly deployed PostgreSQL instance, complementing credential and encryption controls.

Why this answer

Option B is correct because editing pg_hba.conf to restrict connections to specific IP addresses enforces host-based access control, ensuring only trusted hosts can reach the PostgreSQL instance and reducing the attack surface. Option E is correct because setting password_encryption to 'scram-sha-256' ensures stored passwords use SCRAM-SHA-256, a salted challenge-response mechanism that is far stronger than md5 and protects credentials against replay and offline cracking. Option A is wrong because the 'trust' method allows connections without any password, completely undermining authentication.

Option C is wrong because granting superuser to all application service accounts violates least privilege and magnifies the impact of any compromise. Option D is wrong because changing the port to a random high number is only security through obscurity and does not provide real protection against determined attackers.

Exam trap

DS0-001 often tests the misconception that changing a default port or enabling 'trust' improves security, when in fact obscurity is not a control and trust removes authentication entirely.

21
MCQhard

Which of the following is a limitation of the 'Star Schema' design compared to a fully normalized schema?

A.Inability to store large data volumes
B.Slower query performance
C.Increased data redundancy
D.Difficulty in writing joins
AnswerC

Star schemas denormalise dimension tables into flat structures, so descriptive attributes repeat across fact rows. This deliberate redundancy speeds reads but increases storage and risks inconsistent updates, unlike a fully normalised model where data is stored once and joins reconstruct relationships.

Why this answer

A star schema deliberately denormalizes dimension tables to optimize read performance, which inherently duplicates attribute values across dimension rows and across fact-to-dimension relationships. This redundancy is the accepted trade-off for simpler, faster analytical queries. A fully normalized schema (3NF and beyond) eliminates such duplication by splitting data into many related tables.

Exam trap

DS0-001 often tests the misconception that normalization always improves performance — candidates forget that star schemas trade redundancy for query speed, not the other way around.

How to eliminate wrong answers

Option A is wrong because star schemas are specifically designed to handle very large data volumes in data warehouses and columnar platforms. Option B is wrong because star schemas typically deliver faster query performance than fully normalized schemas due to fewer joins and simpler access paths. Option D is wrong because star schemas actually reduce join complexity — a single fact table joins directly to denormalized dimensions, unlike snowflake or fully normalized designs that require multi-hop joins.

22
MCQmedium

A financial services firm is designing a new data warehouse that will hold account balances and transaction histories. The governance committee wants to formalize who owns each data domain, who is accountable for its quality, and how stewardship duties are delegated across business units. Which artifact should the data governance lead produce first to establish these assignments?

A.A data classification matrix
B.A data retention schedule
C.A metadata repository schema
D.A RACI chart for data domains
AnswerD

A RACI chart maps each data domain to the roles that are Responsible, Accountable, Consulted, and Informed. This directly documents domain ownership, single-point accountability for quality, and delegation of stewardship duties across business units. It is the artifact that translates governance intent into named assignments, making it the correct first deliverable for the committee's request.

Why this answer

Establishing ownership and accountability requires an explicit mapping of data domains to roles. A RACI chart names who is responsible, who is accountable, who must be consulted, and who is informed for each domain, which is precisely the governance assignment the committee wants. Classification, retention, and metadata structures support governance but do not assign domain ownership or quality accountability.

Exam trap

The trap here is treating any governance artifact as interchangeable, when the specific committee ask is for role and accountability assignments rather than protection levels or retention rules.

23
MCQmedium

You are performing a backup for a database that is in a 24/7 environment. Which backup type should you use if you want to avoid interfering with the existing backup sequence of full and differential backups?

A.Full backup
B.Copy-only backup
C.Differential backup
D.Transaction log backup
AnswerB

A copy-only backup captures the database without resetting the differential base, so it does not disturb the existing full and differential backup chain. This allows an ad-hoc backup in a 24/7 environment while preserving the scheduled sequence's integrity.

Why this answer

A copy-only backup is a special type of backup that does not affect the normal backup sequence. It is independent of the regular full and differential backup chain, so it does not interfere with the differential base or log sequence. This makes it ideal for ad-hoc backups in a 24/7 environment without disrupting the existing backup strategy.

Exam trap

DS0-001 often tests the impact of different backup types on the backup chain, and candidates may incorrectly choose a full backup, not realizing it resets the differential base.

How to eliminate wrong answers

Option A is wrong because a full backup resets the differential base, which would interfere with the existing differential backup sequence. Option C is wrong because a differential backup is based on the last full backup and would be part of the sequence, potentially affecting subsequent differentials. Option D is wrong because a transaction log backup is part of the log chain and would truncate the log, affecting the log backup sequence.

24
Multi-Selecthard

Which TWO of the following actions are considered best practices for maintaining data integrity in a data pipeline?

Select 2 answers
A.Automated schema validation
B.Using only manual entry
C.Hardcoding credentials in scripts
D.Ignoring error logs
E.Logging data quality metrics
AnswersA, E

Automated schema validation catches structural drift—unexpected column additions, type changes or missing fields—before malformed records propagate downstream. It enforces the pipeline's defined contract at ingestion, satisfying the data-integrity requirement by rejecting or quarantining non-conforming batches early, rather than allowing corrupt data to contaminate transformations and reporting.

Why this answer

Automated schema validation (A) is a best practice because it enforces expected data types, column names, and constraints at each pipeline stage, catching malformed or drifted records before they corrupt downstream tables. Logging data quality metrics (E) is also a best practice because it provides continuous observability into completeness, uniqueness, validity, and timeliness, enabling alerting and root-cause analysis when integrity degrades. By contrast, using only manual entry (B) is error-prone and unscalable, hardcoding credentials in scripts (C) is a security anti-pattern that risks unauthorized access and tampering, and ignoring error logs (D) hides failures that would otherwise reveal integrity problems.

Exam trap

DS0-001 often tests the distinction between preventive controls (schema validation) and detective controls (metric logging), tempting candidates to pick only one when the question asks for TWO best practices.

25
Multi-Selecthard

Which THREE of the following represent common data transformation tasks in a preparation workflow?

Select 3 answers
A.Data cleaning
B.Renaming columns
C.Database deletion
D.Data filtering
E.Hardware installation
AnswersA, B, D

Data cleaning is a core transformation task in preparation workflows, resolving duplicates, inconsistencies, missing values and formatting errors before analysis. It satisfies the stem's requirement by standardising raw input into a consistent, usable dataset, which is precisely the transformation work performed between extraction and loading.

Why this answer

Data cleaning (A) is a core transformation task because it fixes missing values, duplicates, outliers, and inconsistent formats so downstream analysis is reliable. Renaming columns (B) is a standard transformation that standardizes schema and improves readability before joining or modeling data. Data filtering (D) is also a transformation task because it selects or excludes rows based on conditions, reducing the dataset to the relevant subset.

Database deletion (C) is an administrative or destructive operation, not a preparation transformation, and hardware installation (E) is an infrastructure task unrelated to data preparation workflows.

Exam trap

DS0-001 often tests the confusion between data transformation tasks and database administration tasks — candidates pick 'database deletion' because it sounds data-related, missing that transformation operates on records, not on the database object itself.

26
MCQhard

A company subject to GDPR needs to ensure that user data is deleted upon request across all distributed nodes in a NoSQL cluster. Which process is most critical to demonstrate compliance?

A.Snapshotting
B.Database Sharding
C.Cache clearing
D.Automated Data Lineage and Lifecycle Tracking
AnswerD

Automated data lineage and lifecycle tracking maps where each record resides across all distributed nodes and enforces its deletion, producing auditable evidence that erasure requests were fulfilled everywhere. GDPR Article 17 requires demonstrating deletion across the whole cluster, which lineage tracking uniquely provides.

Why this answer

GDPR's right to erasure (Article 17) requires that personal data be deleted across all systems where it resides, including replicas, shards, caches, and backups. Automated Data Lineage and Lifecycle Tracking is the only option that provides the visibility needed to locate every copy of a data subject's records across a distributed NoSQL cluster and enforce deletion policies consistently. Without lineage, you cannot prove to a regulator that deletion was complete.

Exam trap

DS0-001 often tests GDPR erasure by offering operational techniques (snapshotting, sharding, cache clearing) that sound data-management-related — candidates must recognize that only lineage/lifecycle tracking provides the cross-node visibility required to prove complete deletion.

How to eliminate wrong answers

Option A is wrong because snapshotting creates additional copies of data — it increases the erasure surface area rather than solving it, and snapshots often retain deleted records for extended periods. Option B is wrong because sharding is a horizontal partitioning technique for scalability; it distributes data but does nothing to track or enforce deletion across nodes. Option C is wrong because cache clearing only addresses transient in-memory copies and ignores the authoritative data stores, replicas, and backups where the bulk of personal data lives.

27
Multi-Selecthard

A multinational corporation is implementing a data governance program and needs to ensure compliance with the GDPR's data minimization principle. Which TWO practices should the data governance team enforce? (Choose two.)

Select 2 answers
A.Retain all personal data indefinitely to support future analytics
B.Collect only personal data that is necessary for the specified purpose
C.Use anonymization techniques on all data before storage
D.Grant all employees access to personal data to improve efficiency
E.Implement regular data purging based on defined retention schedules
AnswersB, E

Data minimization requires that personal data collected be adequate, relevant, and limited to what is necessary for the purposes for which it is processed. Collecting only necessary data directly aligns with this principle, reducing privacy risks and compliance exposure.

Why this answer

The GDPR's data minimization principle requires that personal data be limited to what is necessary for the specified purpose and kept only as long as needed. Collecting only necessary data and implementing regular purging based on retention schedules directly enforce these requirements. Other options either violate GDPR principles or address different aspects of data protection.

Exam trap

The trap here is equating data minimization with anonymization or access control, but data minimization specifically concerns limiting collection and retention, not transforming data or controlling who sees it.

28
MCQeasy

A business analyst is preparing a quarterly sales report and needs to categorize customers into 'High', 'Medium', and 'Low' value tiers based on their total annual spend. The analyst writes a SQL query against a Microsoft SQL Server database and wants to assign the tier label in the result set without modifying the underlying table. Which SQL construct should the analyst use?

A.A HAVING clause that filters customers based on their total spend thresholds.
B.A GROUP BY clause on the total spend column to group customers into tiers.
C.A CASE expression in the SELECT list that evaluates the total spend and returns the tier label.
D.An UPDATE statement that sets a new tier column in the customers table.
AnswerC

A CASE expression evaluates conditions and returns a corresponding value for each row, making it ideal for deriving a tier label based on total spend without altering the table. It can be included directly in the SELECT list, so the original data remains unchanged. This is the standard SQL approach for conditional categorization in a query result.

Why this answer

A CASE expression in the SELECT list allows the analyst to evaluate each customer's total spend and return a tier label such as 'High', 'Medium', or 'Low' without modifying the table. This keeps the database unchanged and provides the required categorization for the report. Other options either modify data, aggregate without labeling, or filter without categorizing.

Exam trap

The trap here is confusing filtering or grouping operations with conditional labeling, when the requirement is to derive a new column value in the query output.

29
MCQeasy

A database administrator is deploying a new database server and needs to ensure that the database software starts automatically when the operating system boots. On a Linux system, which of the following should the administrator use to manage the database service?

A.service
B.systemctl
C.cron
D.init
AnswerB

systemctl is the command-line utility for controlling the systemd system and service manager. It is used to start, stop, enable, and manage services, including database services. To ensure the database starts at boot, the administrator would use systemctl enable <service>. This is the standard method on modern Linux distributions that use systemd.

Why this answer

On modern Linux systems, systemd is the default init system, and systemctl is the command used to manage services. To ensure a database service starts automatically at boot, the administrator should use systemctl enable <service>. This creates the necessary symlinks for the service to be started during the boot process.

Exam trap

The trap here is assuming that legacy tools like service or cron are the standard for managing service startup, when systemctl is the correct tool on systemd-based systems.

30
MCQhard

A database administrator is deploying a new PostgreSQL database cluster that must support a read-intensive reporting workload. The reporting queries are long-running and scan large tables. The administrator wants to avoid blocking write transactions on the primary server. Which deployment approach should the administrator use?

A.Enable parallel query execution on the primary server to speed up reporting queries.
B.Configure synchronous replication to a standby server and direct reporting queries to the standby.
C.Implement table partitioning on the large tables and run reports against the primary server.
D.Set up streaming replication with hot standby and route reporting queries to the standby server.
AnswerD

PostgreSQL streaming replication with hot standby allows a standby server to accept read-only queries while continuously applying WAL changes from the primary. This offloads long-running reporting queries to the standby, preventing them from consuming resources on the primary and blocking write transactions. It is the standard PostgreSQL approach for read scaling and reporting isolation.

Why this answer

Streaming replication with hot standby allows a PostgreSQL standby to serve read-only queries, so long-running reports run on a separate server. This keeps the primary free to handle write transactions without competition from reporting queries. Synchronous replication would add write latency, while parallel query and partitioning keep the load on the primary.

Exam trap

The trap here is thinking that speeding up reporting queries on the primary solves the blocking problem, when the real solution is to move those queries to a separate standby server.

31
MCQmedium

A financial services company stores trade records in a table where the combination of TradeDate and TradeID must be unique, but individual TradeID values can repeat on different dates. The database administrator needs to enforce this uniqueness at the database level. Which constraint should be implemented?

A.FOREIGN KEY (TradeID) REFERENCES Trades(TradeID)
B.CHECK (TradeDate IS NOT NULL AND TradeID IS NOT NULL)
C.UNIQUE (TradeDate, TradeID)
D.PRIMARY KEY (TradeDate, TradeID)
AnswerC

A composite UNIQUE constraint enforces that no two rows can have the same combination of TradeDate and TradeID, while still allowing individual TradeID values to repeat across different dates. It also permits NULLs (depending on the DBMS) and can coexist with a primary key on another column, making it the precise fit for this requirement.

Why this answer

The requirement is to ensure that each TradeDate and TradeID combination is unique while allowing individual TradeID values to repeat on different dates. A composite UNIQUE constraint achieves exactly this by creating a unique index on both columns together. It does not restrict NULLs or conflict with a separate primary key, and it enforces the business rule at the database level without over-constraining the data.

Exam trap

The trap here is assuming that a composite PRIMARY KEY is the only way to enforce uniqueness across multiple columns, when a UNIQUE constraint can do the same without the additional restrictions of a primary key.

32
Multi-Selecthard

Which THREE factors should be considered when choosing between a traditional RDBMS and a NoSQL database for a new project?

Select 3 answers
A.Consistency requirements (ACID vs BASE)
B.The developer's preferred operating system
C.Data structure (Structured vs Semi-structured)
D.Scalability requirements (Vertical vs Horizontal)
E.The color of the database console UI
AnswersA, C, D

Consistency requirements determine the appropriate data model: ACID transactions suit relational integrity, while BASE prioritises availability and partition tolerance. This directly addresses the stem's demand for selection factors, since the required consistency guarantee dictates whether a traditional RDBMS or a NoSQL database fits the project's distributed, scalability and correctness needs.

Why this answer

Option A is correct because consistency requirements directly drive the choice: a traditional RDBMS enforces ACID transactions (atomicity, consistency, isolation, durability) with strong consistency, whereas many NoSQL databases follow BASE (basically available, soft state, eventual consistency), so the project's tolerance for stale reads and need for multi-row transactions must be evaluated. Option C is correct because data structure determines fit: RDBMSs use fixed schemas with tables, rows, and joins suited to structured data, while NoSQL stores (document, key-value, column-family, graph) handle semi-structured or unstructured data with flexible, evolving schemas. Option D is correct because scalability requirements differ fundamentally: RDBMSs typically scale vertically by adding CPU/RAM to a single node and are harder to shard, while NoSQL systems are designed for horizontal scaling via partitioning/replication across commodity nodes.

Option B does not belong because the developer's preferred operating system is irrelevant—both RDBMS and NoSQL databases run on Windows, Linux, and macOS, and the choice is driven by data and workload needs, not the developer's desktop OS. Option E does not belong because the color of the database console UI is a cosmetic preference with no bearing on data modeling, consistency, scalability, or performance.

Exam trap

DS0-001 often tests whether candidates can distinguish architectural decision factors (consistency, data model, scalability) from irrelevant operational or cosmetic preferences that are deliberately inserted as distractors.

33
Multi-Selectmedium

Which TWO of the following are recognized components of a mature Data Governance framework? (Select TWO)

Select 2 answers
A.Data Quality Standards
B.Office Security Badge Access
C.Data Cataloging
D.Hardware Procurement Policy
E.Network Throughput Monitoring
AnswersA, C

Data quality standards are a recognised Data Governance component because they define measurable accuracy, completeness and consistency rules, plus remediation ownership. They satisfy the stem by converting governance policy into enforceable, auditable thresholds applied across the organisation's data assets.

Why this answer

Data Quality Standards (A) are a recognized component of a mature Data Governance framework because governance defines the accuracy, completeness, consistency, and validity rules that data must satisfy, along with the metrics and accountability for enforcing them. Data Cataloging (C) is also a core governance component, as a catalog inventories data assets, captures metadata, lineage, and ownership, and enables discoverability and stewardship across the organization. By contrast, Office Security Badge Access (B) is a physical security control, not a data governance artifact.

Hardware Procurement Policy (D) concerns IT asset acquisition and does not address data stewardship, quality, or metadata management. Network Throughput Monitoring (E) is an infrastructure performance activity unrelated to governing data definitions, ownership, or lifecycle.

Exam trap

DS0-001 often tests the confusion between data governance and IT operations or physical security, so candidates must distinguish governance components (data quality, cataloging) from unrelated operational controls.

34
Multi-Selecteasy

Which TWO of the following are benefits of using a data warehouse?

Select 2 answers
A.Complete replacement of all source systems
B.Optimization for complex analytical queries
C.Centralized data storage
D.Automated AI decision making
E.Low cost for real-time transactional updates
AnswersB, C

A data warehouse stores data in dimensional, columnar or otherwise query-optimised structures with pre-computed aggregates, so complex analytical queries scan less data than on transactional systems. This directly satisfies the stem's benefit criterion by delivering fast, predictable analytical performance.

Why this answer

Option B is correct because a data warehouse is specifically architected for analytical workloads, using columnar storage, star/snowflake schemas, and MPP engines to efficiently run complex aggregations, joins, and OLAP queries over large historical datasets. Option C is correct because a data warehouse consolidates data from multiple heterogeneous source systems into a single, subject-oriented, integrated repository, giving the enterprise one authoritative version of the truth for reporting and BI. Option A is wrong because a data warehouse complements, rather than replaces, source systems — the OLTP systems remain the systems of record that feed the warehouse via ETL/ELT.

Option D is wrong because a warehouse stores and serves data; it does not itself perform automated AI decision making, which requires separate ML/analytics tooling. Option E is wrong because warehouses are optimized for bulk analytical reads, not low-cost real-time transactional updates, which are the domain of OLTP databases.

Exam trap

DS0-001 often tests the misconception that a data warehouse replaces source systems or handles real-time transactional workloads, when it is designed for analytical reads over centralized historical data.

35
MCQmedium

A data engineer must load a 400 GB Parquet dataset from an object store into a columnar warehouse. The source files are partitioned by date but each partition contains many small files averaging 5 MB. Queries against the loaded table are slow because the warehouse scans far more data than necessary. Which action most directly improves query performance by reducing scanned data?

A.Compact the small files into larger files and ensure the target table is partitioned on the same date column.
B.Convert the Parquet files to CSV before loading to simplify parsing.
C.Increase the warehouse compute cluster size to add more nodes.
D.Compress each 5 MB file with gzip before loading.
AnswerA

Compacting small files reduces per-file overhead and enables more efficient sequential reads, while aligning partitioning with the source date column lets the warehouse prune irrelevant partitions during queries. Together these reduce the volume of data scanned for typical date-filtered queries. This directly addresses the slow scans described in the scenario.

Why this answer

Query latency in columnar warehouses is dominated by how much data must be read and how many files must be opened. Many small files increase metadata and open/close overhead, and a lack of partitioning on the common filter column forces full scans. Compacting files and aligning partitioning with the date column enable partition pruning and efficient columnar reads, directly reducing scanned data.

Exam trap

The trap here is equating raw compute scaling or compression with reduced scanned data, when the actual culprit is file granularity and missing partition alignment.

36
MCQeasy

A retail company is implementing a new data classification policy. The security team needs to categorize data based on its sensitivity and the impact of unauthorized disclosure. Which data classification level typically requires the highest level of protection and is subject to the strictest access controls?

A.Public
B.Internal
C.Restricted
D.Confidential
AnswerC

Restricted data is typically the highest classification level in many data classification policies. It includes highly sensitive information such as trade secrets, personally identifiable information (PII), or protected health information (PHI). Unauthorized disclosure could cause severe legal, financial, or reputational damage. Therefore, it requires the strictest access controls, encryption, and monitoring.

Why this answer

Restricted data represents the highest level of sensitivity in most classification schemes. It demands the strictest access controls because unauthorized disclosure could result in severe consequences, including legal penalties, financial loss, or harm to individuals. By classifying data as Restricted, organizations enforce need-to-know access, encryption, and auditing to protect it appropriately.

This aligns with the scenario's requirement for the highest level of protection.

Exam trap

The trap here is assuming that 'Confidential' is always the highest level, when many frameworks use 'Restricted' as the top tier.

37
Multi-Selectmedium

When preparing a database deployment plan, what THREE factors must be considered to ensure successful capacity planning?

Select 3 answers
A.Peak transactional throughput (transactions per second).
B.The chosen color scheme for the database management dashboard.
C.Projected data growth rates over the next 12 to 24 months.
D.Data retention and archival policies.
E.The total number of users currently registered in the company's Active Directory.
AnswersA, C, D

Peak transactional throughput in transactions per second defines the maximum concurrent workload the database must sustain. This satisfies the stem's capacity planning requirement by sizing CPU, memory and IOPS against worst-case demand rather than average load.

Why this answer

Option A (peak transactional throughput in transactions per second) is correct because capacity planning must size CPU, memory, and I/O to handle the busiest workload period, not just average load, since peak TPS drives the required IOPS and connection limits. Option C (projected data growth rates over the next 12 to 24 months) is correct because storage, backup windows, and index maintenance scale with data volume, so forecasting growth prevents premature exhaustion of disk and memory resources. Option D (data retention and archival policies) is correct because retention periods determine how long data stays in primary storage versus being archived or purged, directly affecting total storage requirements, backup size, and query performance.

Option B is incorrect because dashboard color scheme is a cosmetic UI preference with no bearing on resource sizing or performance. Option E is incorrect because the total count of registered Active Directory users does not indicate concurrent database connections or workload; only active, concurrent sessions and their query patterns matter for capacity planning.

Exam trap

DS0-001 often tests whether candidates can identify genuine capacity-planning inputs versus irrelevant organizational or cosmetic factors, and the trap is selecting user counts from directories as a proxy for database load.

38
MCQhard

An organization is migrating sensitive financial records to a cloud environment. Which security control ensures that only authorized applications can decrypt the data?

A.Database Replication
B.Cloud Hardware Security Module (Cloud HSM)
C.Database Triggers
D.Shared Responsibility Model
AnswerB

A Cloud HSM provides tamper-resistant hardware that stores and manages encryption keys, performing cryptographic operations inside the module so plaintext keys never leave it. Only applications authorised to use the key handle can decrypt data, satisfying the authorised-decryption constraint.

Why this answer

A Cloud Hardware Security Module (Cloud HSM) is a FIPS 140-2/3 validated appliance that stores cryptographic keys in tamper-resistant hardware and performs encryption/decryption operations inside the module. Because keys never leave the HSM in plaintext, only applications authorized to call the HSM's key operations can decrypt the data — satisfying the requirement that decryption be restricted to authorized applications.

Exam trap

DS0-001 often tests key management by offering the Shared Responsibility Model as a distractor — candidates confuse a governance framework (who secures what) with an actual cryptographic control (HSM) that enforces who can decrypt.

How to eliminate wrong answers

Option A is wrong because database replication copies data for availability and disaster recovery; it does not control who can decrypt it and may actually widen the exposure surface. Option C is wrong because database triggers are procedural code that fires on DML events (INSERT/UPDATE/DELETE) — they enforce business logic, not cryptographic access control. Option D is wrong because the Shared Responsibility Model is a governance framework that divides security duties between cloud provider and customer; it describes who is responsible, not a technical control that gates decryption.

39
Multi-Selecthard

A multinational corporation is subject to the General Data Protection Regulation (GDPR). The data protection officer is reviewing the data lifecycle for customer personal data. Which two actions are required to comply with GDPR's data minimization and storage limitation principles? (Choose two.)

Select 2 answers
A.Implement a process to delete or anonymize personal data once the purpose for processing has been fulfilled.
B.Store all personal data in a single centralized database to simplify management.
C.Retain personal data indefinitely to support future analytics.
D.Collect only the personal data that is necessary for the specified purpose.
E.Encrypt all personal data at rest using AES-256.
AnswersA, D

Storage limitation requires that personal data be kept only as long as necessary for the purposes for which it is processed. Implementing deletion or anonymization after the purpose is fulfilled directly complies with this principle. It ensures data is not retained beyond its useful life, reducing risk and meeting GDPR Article 5(1)(e).

Why this answer

GDPR's data minimization principle requires collecting only necessary personal data, while the storage limitation principle requires deleting or anonymizing data once its purpose is fulfilled. These two actions directly align with Article 5(1)(c) and (e). Implementing them reduces privacy risks and demonstrates accountability.

The other options either violate GDPR (indefinite retention) or are unrelated to the specific principles of minimization and storage limitation.

Exam trap

The trap here is assuming that encryption or centralization satisfies data minimization, when these are security or architectural choices, not data lifecycle principles.

40
MCQhard

A database administrator is evaluating storage subsystems for a mission-critical database. The database uses random I/O patterns for most operations. Which storage performance metric is most critical for this workload?

A.Cache hit ratio
B.Sequential throughput
C.IOPS
D.Latency variation
AnswerC

Random I/O patterns issue many small, non-sequential reads and writes, so the storage subsystem's throughput is bounded by how many discrete operations it can complete each second. IOPS directly measures that operation rate, making it the decisive metric for this workload rather than sequential transfer speed.

Why this answer

IOPS (Input/Output Operations Per Second) measures the number of read/write operations a storage subsystem can handle per second. For a database with random I/O patterns, each operation targets a different block, so the ability to service many small, scattered I/Os concurrently is the limiting factor. IOPS is therefore the most critical metric for random I/O workloads, directly determining transaction throughput and query responsiveness.

Exam trap

DS0-001 often tests whether candidates confuse IOPS with throughput — the trap is selecting sequential throughput for a random I/O workload, when IOPS is the correct metric for scattered, small-block operations.

How to eliminate wrong answers

Option A is wrong because cache hit ratio measures how often data is served from cache rather than disk — it is a useful efficiency indicator but not a storage subsystem performance metric for random I/O, and a high hit ratio can mask underlying IOPS limitations. Option B is wrong because sequential throughput (MB/s) is critical for large sequential reads/writes such as backups or table scans, not for random I/O patterns where operations are scattered across the disk. Option D is wrong because latency variation (jitter) affects predictability and tail latency, which matters for SLA-sensitive workloads, but IOPS is the primary capacity metric that determines whether the subsystem can sustain the required random I/O rate at all.

41
MCQmedium

A data engineer is designing a table that stores sensor readings. Each row must include the sensor ID, a timestamp, and a numeric reading. The sensor ID and timestamp together uniquely identify each row, and the table will be queried frequently by sensor ID for the most recent reading. Which table design best supports this scenario?

A.Create a clustered index on reading_time and a separate nonclustered index on sensor_id.
B.Create a primary key on sensor_id only and rely on application logic to prevent duplicate timestamps.
C.Create a composite primary key on (sensor_id, reading_time) and add a nonclustered index on (sensor_id, reading_time DESC).
D.Create a surrogate integer primary key and no additional indexes on sensor_id or reading_time.
AnswerC

A composite primary key on sensor_id and reading_time enforces uniqueness for each sensor reading. Adding a nonclustered index on sensor_id and reading_time descending allows the query optimizer to efficiently retrieve the most recent reading per sensor. This design balances data integrity with query performance for the stated access pattern.

Why this answer

The correct design uses a composite primary key to enforce the natural uniqueness of sensor_id and reading_time, and a composite nonclustered index to accelerate the common query for the latest reading per sensor. This approach maintains data integrity while optimizing for the specified access pattern.

Exam trap

The trap here is assuming a surrogate primary key is always sufficient and overlooking the need for a composite index that matches the query pattern.

42
MCQmedium

When performing sentiment analysis on customer feedback, which preprocessing step is most critical to ensure words like 'Running' and 'run' are treated as the same base concept?

A.Stop-word removal
B.Tokenization
C.Feature scaling
D.Lemmatization
AnswerD

Lemmatization maps inflected forms to their dictionary base using vocabulary and morphological analysis, so 'Running' resolves to 'run' rather than the stem 'runn' that stemming produces. This yields identical tokens for sentiment scoring, satisfying the requirement that both forms share one base concept.

Why this answer

Lemmatization or stemming reduces words to their root or base form.

43
MCQmedium

A data analyst is building a report that joins a fact table of retail transactions to a dimension table of products. The product dimension contains a column 'category' that is frequently used in filters, but the analyst notices that many transactions have a NULL category because the product was not properly matched during the ETL load. The analyst wants to ensure that all transactions appear in the report, even when the category is missing, and that missing categories are labeled as 'Uncategorized'. Which SQL join type and function combination should the analyst use?

A.RIGHT JOIN with COALESCE on the category column.
B.FULL OUTER JOIN with COALESCE on the category column.
C.INNER JOIN with COALESCE on the category column.
D.LEFT JOIN with COALESCE on the category column.
AnswerD

A LEFT JOIN returns all rows from the fact table (transactions) and matching rows from the product dimension. When there is no match, the product columns are NULL, but the transaction remains. Wrapping the category column with COALESCE(category, 'Uncategorized') replaces NULL with the desired label, ensuring all transactions appear and missing categories are clearly identified.

Why this answer

Using a LEFT JOIN from the transaction fact table to the product dimension ensures every transaction is retained, even when no product match exists. The COALESCE function then replaces the resulting NULL category with 'Uncategorized', so missing categories are labeled consistently. This combination satisfies both requirements: all transactions appear, and missing categories are clearly identified.

Exam trap

The trap here is selecting a FULL OUTER JOIN to 'include everything', when the requirement is specifically to preserve all fact rows and not introduce unmatched dimension rows.

44
MCQeasy

A database administrator is defining the data lifecycle policy for a new deployment. What is the final step in the data lifecycle for records that have exceeded their retention period and are no longer required for regulatory compliance?

A.Purging
B.Encryption
C.Migration
D.Archiving
AnswerA

Purging permanently removes records that have passed their retention period and hold no regulatory obligation, satisfying the policy's terminal stage. Unlike archiving, which retains data in secondary storage, or anonymisation, which preserves the dataset minus identifiers, purging eliminates the data entirely, ensuring compliance and reclaiming storage.

Why this answer

Purging is the final step in the data lifecycle, where records that have exceeded retention and are no longer needed for compliance are permanently deleted from all storage systems. It ensures data is irrecoverably removed, satisfying regulatory and privacy requirements. Archiving, migration, and encryption occur earlier in the lifecycle.

Exam trap

DS0-001 often tests the confusion between archiving (long-term retention) and purging (permanent deletion) — candidates pick archiving because it sounds like the end of the data lifecycle.

How to eliminate wrong answers

Option B is wrong because encryption protects data confidentiality but does not remove it at end of life; encrypted data still consumes storage and may be subject to retention rules. Option C is wrong because migration moves data between systems or formats but does not finalize its lifecycle; migrated data still exists. Option D is wrong because archiving moves data to long-term, lower-cost storage for retention, but the data still exists and has not reached end of life.

45
Multi-Selecteasy

A company is conducting a data governance audit. Which TWO of the following items should be verified to ensure proper data security?

Select 2 answers
A.The breakroom refrigerator is energy efficient
B.The database server has a secondary monitor
C.The office printer is connected to a UPS
D.User access rights are reviewed periodically
E.Encryption-at-rest is enabled on all databases
AnswersD, E

Regular reviews ensure the principle of least privilege.

Why this answer

Option D is correct because periodic review of user access rights enforces the principle of least privilege and ensures that permissions are revoked when roles change or employees leave, which is a core access-control requirement in any data governance audit. Option E is correct because encryption-at-rest on all databases protects stored data from unauthorized disclosure if physical media or backups are compromised, directly satisfying data security and confidentiality controls. The remaining options do not belong: A concerns appliance energy efficiency, B concerns a secondary display for the database server, and C concerns power protection for a printer—none of these relate to protecting data confidentiality, integrity, or access control.

Exam trap

DS0-001 often tests whether candidates can distinguish genuine data-security controls from unrelated IT or facilities items, so the trap is selecting plausible-sounding infrastructure items (UPS, monitors) that have no security relevance.

46
MCQeasy

Which regulatory act specifically governs the protection of healthcare-related data?

A.SOX
B.PCI DSS
C.HIPAA
D.GDPR
AnswerC

HIPAA, the Health Insurance Portability and Accountability Act, is the US regulation that sets standards for protecting protected health information held by covered entities and their business associates, making it the act that specifically governs healthcare-related data protection.

Why this answer

HIPAA (Health Insurance Portability and Accountability Act) is the U.S. federal law that specifically governs the protection and privacy of protected health information (PHI). It sets standards for how healthcare data is stored, transmitted, and accessed. SOX, PCI DSS, and GDPR address financial reporting, payment cards, and general data privacy respectively.

Exam trap

DS0-001 often tests whether candidates can distinguish between regulatory frameworks by domain, so the trap is confusing GDPR's broad privacy scope with HIPAA's healthcare-specific mandate.

How to eliminate wrong answers

Option A is wrong because SOX (Sarbanes-Oxley) governs financial reporting and corporate governance, not healthcare data. Option B is wrong because PCI DSS applies to organizations handling credit card data, not health records. Option D is wrong because GDPR is a broad EU data privacy regulation covering all personal data, not specifically healthcare — though it does include health data as a special category, HIPAA is the dedicated healthcare law.

47
Multi-Selecthard

Which THREE of the following are indicators of significant index fragmentation in a database?

Select 3 answers
A.Low page density
B.High scan latency
C.Decreased query performance
D.Increased memory usage
E.Increased server uptime
AnswersA, B, C

Low page density means index pages contain excessive free space from splits and deletes, forcing more pages to be read. This wasted space is a direct structural symptom of fragmentation, satisfying the question's requirement for an indicator of significant index fragmentation.

Why this answer

Low page density (A) is a direct indicator of significant index fragmentation because fragmentation leaves pages partially filled with free space, so the average page fullness (page density) drops well below 100%. High scan latency (B) is correct because fragmented indexes force the storage engine to read more pages and perform extra I/O during scans, measurably increasing the time to complete scan operations. Decreased query performance (C) is correct because fragmentation inflates the number of page reads for range scans and ordered lookups, so queries that rely on the index slow down noticeably.

Increased memory usage (D) is not a reliable fragmentation indicator, since buffer pool consumption is driven by workload and caching behavior rather than index page ordering. Increased server uptime (E) is unrelated to fragmentation, as uptime measures elapsed time since the last restart and says nothing about index page layout or density.

Exam trap

DS0-001 often tests whether candidates can distinguish fragmentation symptoms from generic server-health metrics, so the trap is selecting 'increased memory usage' because it sounds like a performance problem.

48
MCQeasy

A data analyst needs to retrieve a list of all unique countries from a Customers table, sorted alphabetically. Which SQL statement should be used?

A.SELECT DISTINCT country FROM Customers ORDER BY country;
B.SELECT country FROM Customers GROUP BY country;
C.SELECT country FROM Customers ORDER BY country;
D.SELECT UNIQUE country FROM Customers ORDER BY country;
AnswerA

This statement uses the DISTINCT keyword to return only unique country values and then sorts them alphabetically with ORDER BY. It precisely meets the requirement of retrieving a list of unique countries sorted alphabetically. This is the correct and efficient solution.

Why this answer

To retrieve unique countries sorted alphabetically, the DISTINCT keyword must be used to eliminate duplicates, and ORDER BY country must be used to sort the results. This combination directly fulfills both requirements in a single, standard SQL statement.

Exam trap

The trap here is forgetting that without DISTINCT, duplicate country values will appear even if the query is sorted.

49
MCQeasy

A retail company is classifying its data assets for a new governance program. The legal team asks which category of data, if disclosed, would most directly trigger notification obligations under state breach-notification laws because it can identify a specific individual. Which classification should be applied?

A.Personally Identifiable Information (PII), because it can be linked to a specific person.
B.Public data, because it is already available to anyone.
C.System telemetry data, because it records user activity.
D.Confidential business data, because it affects competitive advantage.
AnswerA

PII includes data elements such as names, Social Security numbers, and account identifiers that can single out an individual, so its unauthorized disclosure typically triggers state breach-notification statutes. Classifying these retail records as PII aligns the governance program with legal duties to notify affected persons, regulators, or credit bureaus within mandated timeframes after a confirmed breach.

Why this answer

Breach-notification laws are triggered by unauthorized exposure of data that can identify a specific individual. PII, which includes direct identifiers like names and government numbers, is the classification that maps to those obligations. Public data, confidential business information, and system telemetry do not by themselves identify a person, so they do not drive the same notification duties in a retail governance program.

Exam trap

The trap here is equating any sensitive or confidential label with breach-notification triggers, when the legal test specifically depends on whether the data can identify a person.

50
MCQhard

An application requires an automatic timestamp for every row inserted into an 'Audit' table. Which feature should the developer implement?

A.Index
B.Constraint
C.Trigger
D.View
AnswerC

A trigger executes automatically on each insert, setting the timestamp column without application intervention. This satisfies the requirement for an automatic timestamp on every row, unlike defaults that only apply when no value is supplied, or computed columns that cannot capture insertion time reliably.

Why this answer

A trigger is a special type of stored procedure that automatically executes in response to certain events on a table or view, such as INSERT, UPDATE, or DELETE. To automatically timestamp every row inserted into an 'Audit' table, the developer should implement an AFTER INSERT trigger that updates the timestamp column with the current date and time.

Exam trap

DS0-001 often tests the difference between triggers and constraints, and candidates may choose a constraint (like DEFAULT) when the question implies the need for more complex automatic actions.

How to eliminate wrong answers

Option A is wrong because an index is used to speed up data retrieval and does not perform automatic actions. Option B is wrong because a constraint enforces data integrity rules but cannot automatically set a timestamp. Option D is wrong because a view is a virtual table based on a SELECT statement and does not provide automatic timestamping on insert.

51
MCQmedium

A database administrator is deploying a new PostgreSQL 16 cluster for an online transaction processing (OLTP) application. The application must survive the loss of any single server in the primary data center without manual intervention, and the administrator wants the cluster to automatically promote a standby if the primary fails. The administrator has three servers available and wants to minimize the risk of split-brain. Which deployment approach should the administrator use?

A.Configure streaming replication with a single synchronous standby and a manual failover script triggered by a monitoring alert.
B.Use pg_basebackup to create a physical standby, configure WAL shipping, and rely on the operating system cluster software to restart PostgreSQL on the standby.
C.Configure logical replication from the primary to three subscribers and use a load balancer to route writes to the first subscriber that responds.
D.Deploy a three-node cluster managed by Patroni with etcd as the distributed configuration store to elect a leader and promote a standby automatically.
AnswerD

Patroni uses a distributed consensus store such as etcd to hold the cluster leader lock. With three nodes, a quorum can elect a new leader and promote a standby automatically when the primary fails. The consensus store prevents split-brain by ensuring only one node holds the leader lock. This directly satisfies the automatic failover and split-brain minimization requirements.

Why this answer

Patroni with a three-node etcd cluster provides distributed consensus for leader election, automatic promotion of a standby, and protection against split-brain. A single synchronous standby with manual scripts does not automate failover. Logical replication and WAL shipping without a cluster manager do not promote a standby or elect a leader, so they cannot meet the automatic failover requirement.

Exam trap

The trap here is assuming that streaming replication or WAL shipping alone provides automatic failover, when promotion and leader election require a cluster manager such as Patroni.

52
Multi-Selecteasy

Which TWO of the following are DDL (Data Definition Language) commands?

Select 2 answers
A.DROP
B.INSERT
C.CREATE
D.SELECT
E.UPDATE
AnswersA, C

DROP is a DDL command because it alters the database schema by removing an existing table, view or index definition entirely. Unlike DML statements such as DELETE, which remove rows while preserving the object, DROP satisfies the stem's requirement for commands that define or restructure schema objects.

Why this answer

DROP (A) is a DDL command because it removes entire database objects such as tables, views, or indexes from the schema, altering the database structure. CREATE (C) is also DDL since it defines new database objects like tables, indexes, or schemas, changing the structure of the database. INSERT (B) is a DML command used to add rows of data into existing tables, not to change schema.

SELECT (D) is a DML/DQL command that retrieves data and does not modify database structure. UPDATE (E) is DML because it modifies existing row values within a table rather than defining or altering schema objects.

Exam trap

DS0-001 often tests the distinction between DDL and DML, and candidates frequently confuse CREATE and DROP with data manipulation commands like INSERT or UPDATE, leading them to select incorrect options.

53
MCQmedium

A data analyst needs to calculate the average order value per customer for the previous month. The Orders table contains CustomerID, OrderID, and OrderTotal. The analyst writes a query that includes the AVG(OrderTotal) function and groups by CustomerID. However, the result shows some customers with an average of NULL. Which condition could cause this?

A.The OrderTotal column contains NULL values for some orders, and AVG ignores NULLs, resulting in a NULL average if all orders for a customer have NULL totals.
B.The GROUP BY clause is missing the OrderID column, causing incorrect grouping and NULL averages.
C.The AVG function cannot be used with a GROUP BY clause and returns NULL when grouped.
D.The query is filtering out orders with zero totals, and AVG treats zero as NULL.
AnswerA

AVG ignores NULL values in its calculation. If all orders for a particular customer have NULL OrderTotal, the AVG function has no non-NULL values to average, and it returns NULL for that customer. This is a common cause of NULL averages in aggregate queries. The analyst should handle NULLs explicitly if a different behavior is desired.

Why this answer

The AVG function ignores NULL values. If a customer has orders but all their OrderTotal values are NULL, the average calculation has no valid input and returns NULL. This is the most likely cause of the NULL averages.

To avoid this, the analyst could use COALESCE to substitute NULLs with zero or filter out such customers depending on the business requirement.

Exam trap

The trap here is assuming that AVG includes NULLs as zeros, when in fact it ignores them, which can lead to unexpected NULL results when all values in a group are NULL.

54
Multi-Selecthard

Which THREE database configuration settings help ensure data security and regulatory compliance?

Select 3 answers
A.Role-Based Access Control (RBAC)
B.Transparent Data Encryption (TDE)
C.Audit logging of DDL and DML operations
D.Disabling transaction log backups
E.Automatic plan cache clearing
AnswersA, B, C

RBAC enforces least-privilege access by assigning permissions through roles rather than to individuals, directly satisfying the stem's data security and regulatory compliance requirement. It restricts which users and service principals can read or modify data, providing the access-governance control auditors expect.

Why this answer

Role-Based Access Control (RBAC) is correct because it enforces least-privilege access by granting permissions to roles rather than individual users, which is a core requirement of security frameworks and regulatory mandates such as SOX, HIPAA, and PCI DSS. Transparent Data Encryption (TDE) is correct because it encrypts data at rest (data files, log files, and backups) using a database encryption key protected by a certificate or asymmetric key, satisfying compliance requirements for protecting stored sensitive data. Audit logging of DDL and DML operations is correct because it creates a tamper-evident trail of who changed what schema objects and data and when, which is explicitly required for regulatory audits and forensic investigation.

Disabling transaction log backups is not correct because it breaks the log chain, eliminates point-in-time recovery, and increases data-loss risk, which harms rather than helps compliance. Automatic plan cache clearing is not correct because it is a performance-tuning behavior that has no bearing on access control, encryption, or auditability.

Exam trap

DS0-001 often tests whether candidates can distinguish security/compliance controls (RBAC, TDE, auditing) from operational/performance settings (log backup policy, plan cache management) that are planted as plausible-sounding distractors.

55
MCQeasy

A new data engineer joins a team and needs read access to a production analytics database to troubleshoot a reporting issue. The security policy requires least privilege and time-bound access. Which approach best meets the policy?

A.Grant the engineer the same read-only role used by the analytics team, with no expiration.
B.Add the engineer to the database's superuser group so they can inspect any object during troubleshooting.
C.Grant the engineer temporary read access to the specific schemas needed, with an expiration set at the end of the troubleshooting window.
D.Share the credentials of an existing read-only service account with the engineer for the duration of the task.
AnswerC

This satisfies both policy requirements: the grant is scoped to the schemas relevant to the reporting issue, and the expiration automatically removes access when the task ends. It minimizes standing privileges and produces a clear audit record of who had access and for how long.

Why this answer

Time-bound, scoped grants align access with the actual task and remove it automatically when the work ends. Granting read access only to the schemas needed for the reporting issue, with an expiration, enforces least privilege and creates auditable evidence that privileged access was both justified and temporary.

Exam trap

The trap here is treating a shared read-only role or a service account credential as a convenient shortcut, when the policy requires scoped and expiring access tied to the individual.

56
MCQmedium

You are migrating an on-premises Oracle database to Oracle Cloud Infrastructure (OCI) using a tool that requires the least amount of downtime while keeping the source and destination databases in sync. Which method should you select?

A.Perform a cold backup and restore to an OCI block storage volume.
B.Use Data Pump Export/Import with manual application of incremental backups.
C.Implement Oracle GoldenGate for continuous logical replication.
D.Use SQL Developer to manually generate and execute insert scripts for all tables.
AnswerC

Oracle GoldenGate performs continuous logical replication, applying ongoing changes from source to target so both stay synchronised. This keeps downtime to a brief cutover rather than a full export/import, directly meeting the minimal-downtime, in-sync constraint.

Why this answer

Oracle GoldenGate performs continuous logical replication by mining redo/archive logs on the source and applying changes to the target, keeping both databases in sync with minimal downtime. This makes it the standard choice for near-zero-downtime migrations where the source must remain available until cutover.

Exam trap

The trap is picking a backup/restore or export/import method that sounds thorough but requires downtime; the question's 'least downtime while keeping in sync' signals continuous replication.

How to eliminate wrong answers

Option A is wrong because a cold backup requires shutting down the source database, causing full downtime for the duration of the backup and restore. Option B is wrong because Data Pump export/import is a point-in-time operation; manually applying incremental backups is error-prone, not continuous, and cannot keep source and target in sync in real time. Option D is wrong because generating and executing insert scripts manually is impractical for large databases, does not capture ongoing changes, and is not a viable migration method.

57
Multi-Selecteasy

Which THREE items should be included in a standard database deployment checklist to ensure consistency across environments?

Select 3 answers
A.Standardized service account permissions
B.Application codebase version
C.Database instance configuration parameters
D.The name of the database lead developer
E.Security access policies
AnswersA, C, E

Standardised service account permissions define the exact database principals and privileges the application uses. Documenting them on the checklist guarantees the same least-privilege grants are recreated in each environment, directly satisfying the consistency requirement across deployments.

Why this answer

A standardized database deployment checklist must capture the security and configuration elements that make environments behave identically. Option A (Standardized service account permissions) is correct because the database service account must have the same OS-level and DB-level privileges in every environment, otherwise the instance may fail to start or access files differently. Option C (Database instance configuration parameters) is correct because settings such as memory allocation, max_connections, and compatibility level directly affect performance and behavior, so they must be documented and applied consistently.

Option E (Security access policies) is correct because authentication rules, roles, grants, and network access controls must be replicated to avoid privilege drift or exposure between environments. Option B (Application codebase version) is not a database deployment checklist item—it belongs to application release management, even though the DB may support it. Option D (The name of the database lead developer) is irrelevant operational metadata and has no bearing on environment consistency.

Exam trap

DS0-001 often tests the distinction between database-scoped deployment controls and application-scoped or personnel details, tempting candidates to include the app version or a person's name.

58
MCQhard

A production database is experiencing blocking and deadlocks during peak hours. The DBA suspects that long-running transactions are holding locks. Which dynamic management view (DMV) should the DBA query to identify the blocking chain and the SQL text of the blocking session?

A.sys.dm_exec_requests joined with sys.dm_exec_sql_text
B.sys.dm_exec_query_stats
C.sys.dm_tran_locks
D.sys.dm_os_wait_stats
AnswerA

sys.dm_exec_requests provides information about currently executing requests, including blocking_session_id and the SQL handle. Joining with sys.dm_exec_sql_text retrieves the actual SQL text for each request, allowing the DBA to identify the blocking session and its query. This is the standard method to diagnose blocking chains in SQL Server.

Why this answer

To diagnose blocking, the DBA needs to see which session is blocking and what SQL it is running. sys.dm_exec_requests includes blocking_session_id and sql_handle, which can be passed to sys.dm_exec_sql_text to retrieve the SQL. Other DMVs provide related but incomplete information, such as lock details or wait statistics, without the full context of the blocking chain and query text.

Exam trap

The trap here is assuming that sys.dm_tran_locks alone can provide the SQL text of the blocking session; it requires additional joins to get the query.

59
MCQmedium

A financial services firm allows analysts to query a data warehouse through a BI tool. Security policy requires that analysts see only customers in their assigned portfolio, even though all customer rows reside in one table. The warehouse supports session variables that carry the analyst's portfolio identifier. Which control should be implemented?

A.Encrypt the customer table with a key that differs per portfolio and distribute keys to analysts.
B.Create a separate database schema per portfolio and grant each analyst access only to their schema.
C.Apply row-level security policies that filter rows using the session variable containing the analyst's portfolio identifier.
D.Configure the BI tool to append a WHERE clause for the analyst's portfolio to every generated query.
AnswerC

Row-level security evaluates a predicate at query time and can reference session variables, so each analyst automatically sees only rows matching their portfolio. This enforces the restriction inside the database, independent of the BI tool, and works on the single shared table without duplicating data or relying on application code to add filters.

Why this answer

The policy demands per-analyst row visibility on a shared table. Row-level security with a session-variable predicate enforces this in the database, so every query path is constrained automatically. Schema separation, table encryption, and BI-generated filters either duplicate data, fail to filter rows, or can be bypassed, leaving the portfolio restriction incomplete.

Exam trap

The trap here is trusting an application-layer filter to enforce row access, when a user with direct database connectivity can simply omit the filter and read all rows.

60
Multi-Selecteasy

Which THREE of the following are common data types in relational databases?

Select 3 answers
A.BOOLEAN
B.PIVOT
C.DASHBOARD
D.VARCHAR
E.INTEGER
AnswersA, D, E

BOOLEAN holds true or false values, a standard relational data type for flags such as active status or consent. It satisfies the question's criterion of being a common data type by representing binary logical states compactly, typically as a single bit or small integer column.

Why this answer

BOOLEAN (A) is a standard relational data type that stores TRUE/FALSE (or NULL) values, commonly used for flags and binary states. VARCHAR (D) is a variable-length character string type that stores alphanumeric text up to a defined maximum length, making it one of the most widely used column types. INTEGER (E) is a numeric data type storing whole numbers, typically used for IDs, counts, and other discrete values.

PIVOT (B) is not a data type but a relational operation/query construct that rotates rows into columns, and DASHBOARD (C) is a reporting/visualization artifact rather than a column data type, so neither belongs in this list.

Exam trap

DS0-001 often tests the confusion between SQL operations (PIVOT) and data types, causing candidates to select non-data-type options like PIVOT or DASHBOARD.

61
MCQeasy

You are implementing a data governance framework. Which role is primarily responsible for ensuring that the data quality, security, and lifecycle policies are defined and adhered to for a specific business domain?

A.Data Steward
B.Database Administrator
C.Chief Data Officer
D.Data Architect
AnswerA

A Data Steward owns governance within a single business domain, defining and enforcing data quality, security, and lifecycle policies for that domain's data assets. This domain-scoped accountability satisfies the stem's requirement precisely, unlike enterprise-wide roles such as the CDO or operational roles such as data engineers.

Why this answer

A Data Steward is the role accountable for a specific business domain's data — defining and enforcing data quality rules, security classifications, and lifecycle policies for that domain. Stewards bridge business and IT, translating governance policy into domain-specific standards and monitoring adherence. This domain-scoped accountability is precisely what the question describes.

Exam trap

DS0-001 often tests the distinction between strategic governance roles (CDO, Data Architect) and operational domain-level accountability (Data Steward), catching candidates who pick the most senior-sounding title.

How to eliminate wrong answers

Option B is wrong because the Database Administrator manages the technical operation of database systems (backups, performance, patching, access at the DB level) but does not own business-domain data quality or lifecycle policy. Option C is wrong because the Chief Data Officer sets enterprise-wide data strategy and governance frameworks at the executive level, not domain-specific operational adherence. Option D is wrong because the Data Architect designs the overall data structures, models, and integration architecture, focusing on how data is organised rather than on enforcing quality and lifecycle policies for a business domain.

62
Multi-Selectmedium

Which TWO settings should be configured in a database deployment to improve performance for heavy read-intensive reporting workloads?

Select 2 answers
A.Increasing the number of transaction logs
B.Columnstore indexes
C.Dropping primary key constraints
D.Asynchronous commit mode
E.Read-only secondary replicas
AnswersB, E

Columnstore indexes are highly optimized for large-scale analytical and reporting queries.

Why this answer

B is correct because columnstore indexes store data in a column-oriented, compressed format with batch-mode execution, which dramatically speeds up the large scans and aggregations typical of read-intensive reporting workloads. E is correct because read-only secondary replicas offload reporting queries from the primary, letting the primary handle transactional traffic while secondaries serve reads, improving overall read throughput and scalability. A is wrong because adding transaction logs does not improve read performance and mainly affects write durability/recovery.

C is wrong because dropping primary key constraints harms data integrity and removes useful indexes rather than helping reads. D is wrong because asynchronous commit mode is a write-side durability trade-off and does not accelerate read-intensive reporting.

Exam trap

DS0-001 often tests whether candidates can distinguish write-path optimizations (logs, async commit) from read-path optimizations, so the trap is selecting options that sound like general performance improvements but only affect writes.

63
Multi-Selecteasy

Which TWO of the following statements about SQL are true?

Select 2 answers
A.SQL is for relational databases
B.SQL is only for Linux systems
C.DDL is used for modifying rows
D.DML includes INSERT and UPDATE
E.NoSQL cannot use SQL
AnswersA, D

SQL is the standard query language for relational databases, operating over tables with rows and columns and enforcing schema through primary and foreign keys. This directly satisfies the stem's requirement for a true statement about SQL's role, since relational systems such as SQL Server, PostgreSQL and MySQL all expose SQL as their primary interface.

Why this answer

Option A is correct because SQL (Structured Query Language) is the standard language designed for querying and managing relational databases, where data is stored in tables with rows and columns and relationships are defined via keys. Option D is correct because DML (Data Manipulation Language) is the SQL subset that works with the data itself, and its core statements include INSERT (to add rows), UPDATE (to modify existing rows), and DELETE (to remove rows). Option B is incorrect because SQL is platform-independent and runs on Windows, Linux, macOS, and mainframe systems alike.

Option C is incorrect because DDL (Data Definition Language) deals with schema objects such as CREATE, ALTER, and DROP for tables, indexes, and databases, not with modifying individual rows. Option E is incorrect because several NoSQL systems (for example, Cassandra with CQL and some document databases) do provide SQL-like query languages, so the blanket claim that NoSQL cannot use SQL is false.

Exam trap

DS0-001 often tests whether candidates conflate DDL with DML, so the trap is choosing 'DDL is used for modifying rows' when DDL actually defines or alters schema structures, not row data.

64
MCQmedium

An administrator needs to restrict a user's ability to see only rows where the 'Region' column is 'North'. What feature should be used?

A.View creation
B.Row-Level Security (RLS)
C.Stored Procedures
D.Column Masking
AnswerB

Row-Level Security applies a predicate (typically via a security policy and inline table-valued function) that filters rows by the user's identity, so each user sees only permitted rows such as Region = 'North'. Column-level security or views would not enforce this per-user row filtering.

Why this answer

Row-Level Security (RLS) is a database feature that filters rows returned by queries based on the identity or context of the executing user, so a user in the 'North' region only sees rows where Region = 'North'. It enforces the restriction at the database engine level, applying transparently to all queries regardless of the application or tool used.

Exam trap

DS0-001 often tests row vs. column access control by offering Column Masking as a distractor — candidates who focus on 'restricting visibility' without noting the 'rows where Region = North' phrasing pick masking, which hides column values rather than filtering rows.

How to eliminate wrong answers

Option A is wrong because a view can filter rows, but it requires users to query the view instead of the base table — if they have base-table access, the restriction is bypassed, and managing per-region views does not scale. Option C is wrong because stored procedures encapsulate logic but do not automatically restrict row visibility unless every access path goes through them, which is fragile. Option D is wrong because column masking hides or obfuscates column values (e.g., showing XXX-XX-1234 for SSN) but does not filter which rows a user can see — it addresses a different dimension of access control.

65
MCQeasy

During a disaster recovery test, the DBA realizes the database restoration takes too long. Which action is the most effective way to improve the restore speed of a large database?

A.Disable antivirus
B.Use striped backups
C.Run in single-user mode
D.Increase the recovery interval
AnswerB

Striped backups split the backup set across multiple files, letting SQL Server read them in parallel during restore. This directly addresses the stem's constraint: restoration of a large database takes too long. Parallel I/O streams reduce elapsed restore time proportionally to the number of stripes, unlike single-file backups, which remain bound by one device's throughput.

Why this answer

Striped backups split the backup (and therefore the restore) across multiple files or devices, allowing parallel read/write streams that dramatically reduce restore time for large databases. SQL Server's BACKUP ... TO DISK='f1', DISK='f2', ... and RESTORE with multiple MOVE targets, or Oracle RMAN with multiple channels, exploit this.

The bottleneck in large restores is usually I/O throughput, and striping multiplies it.

Exam trap

DS0-001 often tests whether candidates pick environmental tweaks (antivirus, single-user mode) over architectural changes (striping) — the trap is choosing a plausible-sounding but low-impact option instead of the one that addresses the I/O bottleneck.

How to eliminate wrong answers

Option A is wrong because disabling antivirus is a marginal, environment-specific tweak that doesn't address the fundamental I/O parallelism limit — it may help slightly but is not the most effective structural change. Option C is wrong because single-user mode only restricts concurrent access; it does not speed up the physical restore operation itself and is typically used for recovery or maintenance, not performance. Option D is wrong because increasing the recovery interval affects how often SQL Server checkpoints (indirectly affecting recovery time after a crash), not the speed of restoring a backup file.

66
MCQmedium

A database administrator is deploying a production environment and needs to restrict network access to the database server. Which tool or setting is the first line of defense at the network layer?

A.Firewall access control lists
B.SSL/TLS certificates
C.Database user permissions
D.Database proxy authentication
AnswerA

Firewall access control lists filter traffic by source IP, port and protocol before any connection reaches the database engine, satisfying the requirement for network-layer restriction. Unlike authentication controls, which operate after a session is established, ACLs drop unauthorised packets at the perimeter, making them the first line of defence.

Why this answer

Firewall access control lists (ACLs) operate at the network layer and are the first line of defense for restricting which hosts or subnets can reach the database server's listening port. They filter traffic before it reaches the database engine, providing the outermost boundary of protection.

Exam trap

DS0-001 often tests the OSI layer at which each control operates, and the trap is selecting encryption or authentication mechanisms that sound security-related but do not actually restrict network reachability.

How to eliminate wrong answers

Option B is wrong because SSL/TLS certificates encrypt data in transit and authenticate endpoints, but they do not restrict which network sources can connect — an attacker with a valid certificate path can still reach the port. Option C is wrong because database user permissions operate at the application layer inside the database, after a connection is established — they are a second line of defense, not the network-layer first line. Option D is wrong because database proxy authentication is an application-layer access control mechanism that also operates after network connectivity is established, not at the network boundary.

67
MCQhard

A query is slow due to excessive scanning of a large table. The execution plan shows a 'Table Scan'. What is the most likely missing element?

A.A view
B.An index
C.A stored procedure
D.A trigger
AnswerB

A table scan reads every row because no ordered access path exists for the predicate or join columns. Creating an index on the filtered or joined column lets the optimiser perform a seek or range scan, drastically reducing pages read.

Why this answer

A Table Scan in an execution plan means the database engine is reading every row of the table to satisfy the query, which is expensive on large tables. An index provides a sorted access path that lets the optimizer seek directly to matching rows instead of scanning the whole table, dramatically reducing I/O. Adding an appropriate index on the columns used in WHERE, JOIN, or ORDER BY clauses is the standard fix.

Exam trap

The trap here is confusing logical database objects (views, procedures, triggers) with physical access structures (indexes) — only an index changes how rows are physically located during query execution.

How to eliminate wrong answers

Option A is wrong because a view is just a stored query definition and does not change how the underlying data is accessed — it can even worsen performance if it obscures predicates. Option C is wrong because a stored procedure is a batch of SQL logic, not a data-access structure, and does not eliminate table scans. Option D is wrong because a trigger fires on DML events and has no role in optimizing read query plans.

68
MCQmedium

A healthcare analytics team stores patient records in a PostgreSQL database. A new analyst joins and must be able to query only the columns patient_id, visit_date, and diagnosis_code from the encounters table, but must be blocked from viewing patient_name and ssn. Which mechanism should the database administrator implement to meet this requirement?

A.Enable row-level security (RLS) policies on the encounters table for the analyst role.
B.Create a view that selects only the permitted columns and grant SELECT on the view to the analyst while revoking table-level access.
C.Apply Transparent Data Encryption (TDE) to the encounters table and share the encryption key with the analyst.
D.Grant SELECT on all columns of the encounters table and rely on the analyst to avoid selecting sensitive fields.
AnswerB

A view projecting only the approved columns enforces column-level restriction at the database layer. Revoking direct table privileges prevents the analyst from bypassing the view by querying the base table. This is the standard least-privilege pattern for limiting column visibility without duplicating data.

Why this answer

Restricting an analyst to specific columns is achieved by creating a view that projects only the approved fields and granting SELECT on that view, while revoking direct table access. This enforces least privilege at the database layer and prevents the analyst from querying sensitive columns such as patient_name or ssn through the base table.

Exam trap

The trap here is confusing row-level security with column-level restriction; RLS filters rows, not columns, so it cannot hide sensitive fields within a row the analyst is allowed to see.

69
MCQmedium

A database administrator is deploying a new Oracle 19c database and needs to ensure that if the production server's power fails, no committed transactions are lost. The storage array has a write-back cache with a battery-backed unit. Which configuration should the administrator verify?

A.Verify that the storage array's write-back cache is protected by the battery and that the operating system does not disable write caching flush.
B.Increase the size of the redo log buffer to reduce the frequency of log writer flushes.
C.Set the database to ARCHIVELOG mode and enable automatic archival.
D.Enable FORCE LOGGING at the tablespace level to guarantee redo is generated for all changes.
AnswerA

Committed transactions are durable only when redo records reach nonvolatile storage. A battery-backed write-back cache preserves cached writes across a power failure, and the operating system must honor flush commands so that commits are not left in volatile cache. This combination ensures that a commit acknowledged to the application survives a power loss.

Why this answer

Commit durability requires that redo records reach nonvolatile storage before the commit is acknowledged. A battery-backed write-back cache keeps cached writes safe across a power failure, and the operating system must pass flush commands to the array so commits are not stranded in volatile memory. Verifying both conditions directly addresses the requirement.

Exam trap

The trap here is assuming ARCHIVELOG mode or FORCE LOGGING guarantees durability, when those features govern recoverability and redo completeness rather than commit-time flushing.

70
MCQeasy

A developer needs to retrieve a list of all customers who have placed at least one order, along with the total amount spent by each. The 'Customers' table has one row per customer, and the 'Orders' table has one row per order with a 'CustomerID' foreign key. Which SQL construct should the developer use?

A.SELECT with a CROSS JOIN between Customers and Orders and a HAVING clause on total amount
B.SELECT with a RIGHT JOIN from Customers to Orders and a GROUP BY on order ID
C.SELECT with an INNER JOIN between Customers and Orders, grouped by customer, with SUM on order amount
D.SELECT with a LEFT JOIN from Customers to Orders and a WHERE clause excluding NULL order amounts
AnswerC

An INNER JOIN returns only customers who have matching order rows, which satisfies the requirement to list customers who placed at least one order. Grouping by customer and applying SUM to the order amount produces the total spent per customer, directly matching the requested output without extra filtering.

Why this answer

An INNER JOIN between Customers and Orders returns only customers with matching orders, and grouping by customer with SUM on the order amount yields the total spent per customer. The other joins either include unmatched rows, create a Cartesian product, or group at the wrong level.

Exam trap

The trap here is overcomplicating the query with outer joins when a plain INNER JOIN already satisfies the requirement of customers who placed orders.

71
Multi-Selectmedium

Which THREE of the following are examples of descriptive statistics?

Select 3 answers
A.Standard deviation
B.Mean
C.Machine learning
D.Median
E.Linear regression
AnswersA, B, D

Standard deviation is a descriptive statistic, quantifying the spread or dispersion of values around the mean. It satisfies the stem's requirement by summarising variability within the collected dataset, not by drawing inferences about a wider population.

Why this answer

Standard deviation (A) is a descriptive statistic because it quantifies the spread or dispersion of a dataset around its mean, summarizing variability without inferring beyond the observed data. The mean (B) is a measure of central tendency that summarizes a dataset by averaging all values, making it a classic descriptive statistic. The median (D) is also a measure of central tendency, representing the middle value of an ordered dataset and summarizing its central position descriptively.

Machine learning (C) is not a descriptive statistic; it is a field of algorithms used for prediction or pattern recognition, often involving inferential or predictive modeling. Linear regression (E) is an inferential/predictive technique that models relationships between variables to estimate or forecast outcomes, not merely to summarize data.

Exam trap

DS0-001 often tests the boundary between descriptive and inferential statistics, tricking candidates into selecting predictive techniques like linear regression or machine learning as if they were summary measures.

72
MCQhard

A database administrator is troubleshooting a query that occasionally runs slowly. The query uses a parameterized stored procedure. The execution plan shows that sometimes the query uses an index seek and sometimes a clustered index scan. The DBA suspects parameter sniffing. Which action should the DBA take to mitigate the issue while preserving the ability to use the optimal plan for each execution?

A.Enable Trace Flag 2371 at the server level.
B.Use the OPTIMIZE FOR UNKNOWN query hint.
C.Create a plan guide to force the index seek plan.
D.Add OPTION (RECOMPILE) to the query inside the stored procedure.
AnswerD

OPTION (RECOMPILE) forces a new plan to be generated for each execution, allowing the optimizer to use the actual parameter values and choose an optimal plan per execution. This mitigates parameter sniffing by avoiding reuse of a plan optimized for a different parameter value, while still allowing seeks or scans as appropriate.

Why this answer

Parameter sniffing causes the optimizer to reuse a plan compiled for a specific parameter value, which may be suboptimal for other values. Adding OPTION (RECOMPILE) forces a new plan for each execution, allowing the optimizer to use the actual parameter values and choose the best plan per execution, directly mitigating the issue while retaining flexibility.

Exam trap

The trap here is thinking that forcing a specific plan or using average selectivity hints solves parameter sniffing, when only per-execution recompilation restores optimal plan choice for each parameter value.

73
Multi-Selectmedium

A retail company is designing a data warehouse star schema for sales analysis. The team must choose attributes for the fact table and the dimension tables. Which TWO of the following should be placed in the fact table rather than a dimension table? (Choose two.)

Select 2 answers
A.Store city where each sale occurred
B.Quantity of units sold in each transaction line
C.Customer loyalty tier at time of purchase
D.Product category name assigned to each item
E.Extended sales amount for each transaction line
AnswersB, E

Quantity is a numeric measure that varies per transaction and is aggregated across dimensions such as product, store, and time. Measures like this belong in the fact table because they are the values being summed, averaged, or compared during analysis, and they are meaningless without the dimension context that describes them.

Why this answer

Fact tables hold numeric, additive measures that analysts aggregate, such as quantity sold and extended sales amount. Dimension tables hold descriptive attributes that provide context for those measures, including product category, store city, and customer loyalty tier. Separating measures from descriptors keeps the star schema efficient and supports flexible slicing across dimensions.

Exam trap

The trap here is treating any column that appears in sales records as a fact, when descriptive attributes such as city or category belong in dimensions.

74
Multi-Selectmedium

You are planning the disk layout for a SQL Server production database. Which THREE best practices should you follow to optimize storage performance?

Select 3 answers
A.Place data files (.mdf) and transaction log files (.ldf) on the same physical drive.
B.Place transaction log files on high-speed, low-latency storage.
C.Place backup files on the same drive as the database data files.
D.Use separate physical volumes for data files and backups.
E.Store data files on a separate physical volume from the operating system.
AnswersB, D, E

Transaction log writes are sequential and latency-sensitive, so placing log files on high-speed, low-latency storage (such as NVMe SSD) minimises write-ahead logging delay and commit time. This satisfies the stem's storage-performance constraint, since slow log I/O throttles every transaction regardless of data file speed.

Why this answer

Option B is correct because transaction log files (.ldf) are written sequentially and are highly latency-sensitive, so placing them on high-speed, low-latency storage (e.g., SSD/NVMe or a dedicated RAID 10 array) minimizes log write waits and improves transaction throughput. Option D is correct because keeping backups on separate physical volumes from the data files prevents a single disk failure from destroying both the database and its backups, and it avoids backup I/O competing with production data I/O. Option E is correct because isolating data files from the OS volume prevents OS paging, updates, and system I/O from contending with database reads/writes, and it also protects the database from OS volume corruption or reinstallation.

Option A is incorrect because co-locating .mdf and .ldf on the same physical drive creates I/O contention between random data access and sequential log writes and removes fault isolation. Option C is incorrect because storing backups on the same drive as the data files means a single drive failure can destroy both the live database and its backups, and backup writes will degrade production performance.

Exam trap

DS0-001 often tests whether candidates confuse 'separate volumes' with 'separate files' — the trap is thinking that putting .mdf and .ldf on the same drive but in different folders is sufficient, when the physical spindle/LUN separation is what actually matters.

75
MCQhard

A database administrator is deploying a PostgreSQL 15 cluster that will serve a global application with users in North America, Europe, and Asia. The requirement is that reads be served with low latency from each region while writes are accepted in only one region. Which deployment architecture should the administrator choose?

A.A single primary in North America with cascading streaming replicas in Europe and Asia.
B.A single primary in North America with synchronous replication to a standby in Europe.
C.A primary in North America with physical streaming replicas in Europe and Asia, plus a connection router that directs reads to the nearest replica.
D.Multi-master logical replication with writable nodes in all three regions.
AnswerC

Physical streaming replication ships WAL to replicas that continuously apply it, so each region holds a full copy of the data. A connection router such as Pgpool-II or a proxy directs read queries to the closest replica, cutting read latency for each region. Writes still go to the single primary, satisfying the single-write-region requirement.

Why this answer

Streaming physical replicas in each region place a full copy of the data close to local users, and a connection router sends read queries to the nearest replica, minimizing read latency. Writes continue to flow to the single primary, so the single-write-region constraint is preserved while read performance improves globally.

Exam trap

The trap here is choosing multi-master replication for global writes, which violates the single-write-region requirement and introduces conflict resolution problems.

Page 1 of 5

Page 2

All pages