DA0-002 Visualization and Reporting Practice Question
A healthcare analyst is creating a report on patient outcomes. To comply with privacy regulations, which action should be taken before publishing?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Anonymize personally identifiable information
Anonymizing PII protects patient identities and ensures compliance with privacy laws like HIPAA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Anonymize personally identifiable information
Why this is correct
Anonymising removes identifiers such as names, addresses and dates, so published patient outcome data cannot be traced back to individuals. This directly satisfies the privacy regulation constraint in the stem, which requires de-identification before release. Unlike pseudonymisation, anonymisation is irreversible, ensuring the report itself carries no personally identifiable information.
- ✗
Include patient names for context
Why it's wrong here
Including patient names exposes direct identifiers, breaching privacy regulations such as HIPAA and UK GDPR regardless of report context. Names are tempting because they aid clinical narrative, yet they are appropriate only in access-controlled records, not in published aggregate reporting.
- ✗
Provide raw data to all stakeholders
Why it's wrong here
Publishing raw patient data to all stakeholders breaches privacy regulations, since identifiable records require de-identification or aggregation before disclosure. It is tempting because sharing source data supports transparency and independent verification, and would be acceptable only when recipients are authorised and data is anonymised or covered by consent.
- ✗
Aggregate data without anonymization
Why it's wrong here
Aggregation alone does not remove identifiers, so individuals may remain re-identifiable, breaching privacy rules. It tempts as a de-identification shortcut, but anonymisation or another approved de-identification method must be applied before publishing patient outcome data.
Go deeper
Related to this question
About these practice questions
This DA0-002 question is part of Courseiva's 1,004-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DA0-002 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DA0-002 exam.