DA0-002 Data Governance Practice Question
A marketing analytics team maintains a customer contact table that includes email addresses and mobile numbers. The governance policy states that consent must be recorded and honored for each channel before outreach. A campaign manager wants to email everyone in the table, but the analyst notices that many records lack a consent timestamp. Which governance principle should guide the analyst's decision?
⚠ Common exam trap
The trap here is reaching for data minimization or accuracy when the actual blocker is the absence of documented consent for a specific outreach channel.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Purpose limitation and consent, because outreach must match the permission each contact granted
Purpose limitation and consent require that outreach match the permission each individual granted. Records lacking a consent timestamp have no documented authorization for email, so they must be excluded regardless of other governance principles. This protects the organization and respects the contact's choices while still allowing the campaign to proceed for consented records.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data retention, because contact records should be deleted after a fixed period
Why it's wrong here
Retention schedules define how long data may be kept, not whether a specific outreach is allowed. Even a record within its retention window may lack consent for email. Applying retention alone leaves the consent gap unresolved, so it does not answer whether the campaign manager can mail the table.
- ✗
Data accuracy, because email addresses must be verified before sending
Why it's wrong here
Accuracy ensures records reflect reality, such as valid email addresses, but it does not establish permission to contact. A verified address can still belong to someone who never consented to marketing email. Accuracy alone would not stop the campaign from reaching non-consenting contacts, so it is the wrong principle for this decision.
- ✗
Data minimization, because only the fields needed for the campaign should be queried
Why it's wrong here
Data minimization limits collection and use to what is necessary for a stated purpose, but it does not decide whether outreach is permitted. The core issue is whether each contact consented to email. Applying minimization alone would not prevent mailing records that lack a consent timestamp, so it fails to resolve the campaign manager's request.
- ✓
Purpose limitation and consent, because outreach must match the permission each contact granted
Why this is correct
Purpose limitation and consent require that data be used only for the purposes the individual authorized. Records without a consent timestamp have no documented permission for email outreach, so they must be excluded. This principle directly governs the campaign manager's request and protects the organization from contacting people who never agreed to receive marketing messages.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DA0-002 question from scratch — 1,004 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This DA0-002 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DA0-002 exam.