DA0-002 Data Governance Practice Question
Exhibit
{
"policy": {
"access": "restricted",
"roles": ["analyst", "manager"],
"conditions": {
"time": "business_hours",
"location": "internal_network"
}
}
}Refer to the exhibit. A data analyst is unable to access the dataset during weekends. Based on the policy, what is the most likely reason?
⚠ Common exam trap
It's easy for candidates to assume the issue is a missing role or network restriction, but the policy explicitly shows a time-based condition that overrides other permissions, and the weekend access attempt directly violates that condition.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The condition restricts access to business hours only
The policy explicitly includes a condition that restricts access to business hours only (e.g., Monday–Friday, 9 AM–5 PM). Since the analyst is attempting to access the dataset during a weekend, the condition denies access regardless of the analyst's role or network location. This is a common attribute-based access control (ABAC) rule where time-based conditions are evaluated before granting permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The analyst's role is not in the list
Why it's wrong here
The analyst role is explicitly listed.
- ✗
The policy is misconfigured
Why it's wrong here
The policy is correctly configured to restrict access as described.
- ✗
The access condition requires being on the internal network
Why it's wrong here
The network condition is met, but the time condition fails.
- ✓
The condition restricts access to business hours only
Why this is correct
Weekends are outside business hours, so access is denied.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every DA0-002 question from scratch — 986 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DA0-002 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DA0-002 exam.