DA0-002 Data Governance Practice Question
Exhibit
{
"policy": {
"Statement": [
{
"Effect": "Allow",
"Action": "SELECT",
"Resource": "prod_db.customers",
"Condition": {
"DateLessThan": {
"aws:CurrentTime": "2023-10-01T00:00:00Z"
}
}
}
]
}
}Refer to the exhibit. A data analyst is unable to run a query on the customers table after October 1, 2023. What is the reason?
⚠ Common exam trap
CompTIA often tests the distinction between an explicit deny and an implicit deny caused by a missing allow condition; the trap here is that candidates mistakenly think the policy contains an explicit 'deny after date' statement, when in reality it simply grants access only before the date, relying on the default implicit deny for all other times.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy allows access only before October 1, 2023
The policy explicitly allows access only before October 1, 2023, meaning any query attempt on or after that date is denied. This is a time-based access control condition often implemented using a policy engine that checks the current time against a condition. Since the query fails after October 1, 2023, the policy's effective date restriction is the direct cause.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The resource name is incorrect
Why it's wrong here
The resource name "prod_db.customers" appears correct and is not causing the issue.
- ✓
The policy allows access only before October 1, 2023
Why this is correct
After October 1, the condition fails, and the Allow effect no longer applies, resulting in denial.
- ✗
The action should be READ not SELECT
Why it's wrong here
SELECT and READ are equivalent in many systems; this would not cause the date-specific failure.
- ✗
The policy denies access after October 1, 2023
Why it's wrong here
The policy uses an explicit Allow, not Deny. The deny is implicit after the condition expires.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DA0-002 question from scratch — 986 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DA0-002 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DA0-002 exam.