Data Governance And Security

Which access control model should be implemented to ensure that a user can only access files based on their specific job role?

A developer wants to use a subset of production data for testing. Which method ensures the test data retains its structure while protecting privacy?

Your organization uses Azure Active Directory for access management. You need to ensure that database administrators can only access a specific production Azure SQL instance during a scheduled 4-hour maintenance window. Which control is most appropriate?

A company subject to GDPR needs to ensure that user data is deleted upon request across all distributed nodes in a NoSQL cluster. Which process is most critical to demonstrate compliance?

Which TWO of the following are recognized components of a mature Data Governance framework? (Select TWO)

An organization is migrating sensitive financial records to a cloud environment. Which security control ensures that only authorized applications can decrypt the data?

A company is conducting a data governance audit. Which TWO of the following items should be verified to ensure proper data security?

Which regulatory act specifically governs the protection of healthcare-related data?

You are implementing a data governance framework. Which role is primarily responsible for ensuring that the data quality, security, and lifecycle policies are defined and adhered to for a specific business domain?

An administrator needs to restrict a user's ability to see only rows where the 'Region' column is 'North'. What feature should be used?

An organization must ensure that PII in a legacy SQL Server database is masked before being accessed by the HR analytics team. Which SQL Server feature should the DBA implement to ensure the data is obscured at the query level without changing the underlying storage?

Which protocol should be enforced for all data-in-transit between application servers and database instances?

A company requires that all database backups be immutable for 7 years to meet regulatory audits. How can this be achieved?

A company needs to implement centralized identity management for all database administrators. Which service is appropriate?

A data engineer is configuring an S3 bucket to comply with GDPR requirements regarding the 'Right to be Forgotten.' Which combination of configuration settings best automates the lifecycle of user-specific data objects that have reached the end of their retention period?

When decommissioning a legacy server, what is the most secure way to handle the hard drives containing sensitive data?

Which TWO controls are necessary to maintain the integrity of a data warehouse?

Which THREE actions should be performed during a data incident response procedure involving a potential PII leak?

When assessing data privacy compliance, which THREE categories of data are typically protected under laws like CCPA or GDPR?

Which THREE of the following are valid methods for securing cloud-based data storage?

A company is migrating to a cloud data warehouse and must comply with CCPA requirements for data portability. Which action is necessary to ensure compliance regarding user access requests?

A database administrator needs to implement column-level encryption for sensitive PII in a SQL Server environment. Which tool should be used to ensure the encryption keys are managed outside the database engine?

A company needs to audit all administrative actions taken on their database server. Which feature should the DBA enable?

Which TWO actions constitute good data lifecycle management?

Which TWO of the following are common administrative tasks in a Data Governance program?

Which type of data is defined as 'sensitive' and usually requires enhanced protection?

Which THREE elements are essential when configuring Database Activity Monitoring (DAM)?

A data analyst discovers that raw log files contain unmasked social security numbers. Which data governance practice should be implemented immediately to remediate the risk?

Which technology provides the best protection against data exfiltration from an on-premises database by a rogue administrator?

An administrator needs to restrict access to a specific S3 bucket so that only the Finance team can view files. Which configuration is the most effective approach?

Which THREE of the following are recognized data governance best practices?

Which document is essential to establish the legal basis for processing personal data under GDPR between a controller and a processor?

As a Data Privacy Officer, you are reviewing technical controls for data security. Which TWO of the following are best practices to ensure 'Privacy by Design' in a new application? (Select TWO)

When reviewing a database security configuration, which finding poses the highest risk?

Which action represents a 'Data Lifecycle' phase where data is safely removed?

To ensure non-repudiation in a database system, what must be captured for every transaction?

What is the first step in a Data Governance program?

What is the primary purpose of a Data Protection Impact Assessment (DPIA) under GDPR?

You are evaluating the data lifecycle of an organization's unstructured data. Which THREE actions should be included in a robust Data Retention and Disposal policy? (Select THREE)

In a multi-tenant cloud database, which mechanism ensures that tenant A cannot see data belonging to tenant B?

Which of the following is a common symptom of a broken access control mechanism in a database?

A security team is implementing an access management strategy. Which THREE of the following are considered essential components of an effective Identity and Access Management (IAM) framework?

An organization uses a 'bring your own key' (BYOK) model for database encryption. What is the primary benefit?

Which TWO technologies or methods are most effective at protecting sensitive data against insider threats?

Which document outlines the 'Data Owner' responsibilities in a data governance framework?

A company is using a cloud-based data lake. To satisfy data sovereignty requirements, they must ensure data remains in a specific region. How can this be enforced?

You are auditing data security controls. You find that raw sensitive data is being written to application logs by the ETL process. Which remediation step best aligns with the principle of 'Data Minimization'?

To comply with CCPA, an organization must track the 'Right to Know' requests. Which component of a Data Governance Framework is most relevant?

An administrator needs to enforce password complexity on the database level. Where should this policy be configured?