Security practice questions

A data analyst is creating a self-service reporting environment. Which data governance practice ensures users see only data relevant to their department?

Trap 1: Data lineage

Data lineage shows data origin, not access control.

Trap 2: Data dictionary

Data dictionary defines metrics, not access control.

Trap 3: Single version of truth

SVOT ensures consistency, not access restriction.

A
Data lineage
Why wrong: Data lineage shows data origin, not access control.
B
Row-level security
Correct. Row-level security filters data per user.
C
Data dictionary
Why wrong: Data dictionary defines metrics, not access control.
D
Single version of truth
Why wrong: SVOT ensures consistency, not access restriction.

Question 2hardmulti select

Which THREE are challenges in acquiring data from external sources? (Select three.)

Trap 1: Data redundancy

Data redundancy is an internal storage or quality issue, not directly related to acquisition from external sources.

Trap 2: Unauthorized access

Unauthorized access is a security risk, not a typical challenge in the acquisition process itself.

A
Data redundancy
Why wrong: Data redundancy is an internal storage or quality issue, not directly related to acquisition from external sources.
B
Unauthorized access
Why wrong: Unauthorized access is a security risk, not a typical challenge in the acquisition process itself.
C
Licensing restrictions
External data may have legal restrictions on usage, sharing, or redistribution.
D
Rate limiting
APIs often impose rate limits that restrict the volume or frequency of data access.
E
Data format inconsistency
External sources often use different formats, requiring transformation before integration.

Question 3hardmulti select

A data analyst is preparing a report on regional sales performance. The report will be viewed by regional managers who should only see their own region's data. Which TWO data governance measures are most relevant?

Trap 1: Single version of truth

While important, it doesn't address regional access control or definition clarity.

Trap 2: Data retention

Data retention is about how long data is kept, not relevant here.

Trap 3: Data lineage

Data lineage is about tracking data origins, not access control or definition.

A
Single version of truth
Why wrong: While important, it doesn't address regional access control or definition clarity.
B
Row-level security
Row-level security limits users to their own region's data.
C
Data retention
Why wrong: Data retention is about how long data is kept, not relevant here.
D
Data lineage
Why wrong: Data lineage is about tracking data origins, not access control or definition.
E
Data dictionary
A data dictionary standardizes metric definitions to avoid confusion.

Question 4mediummultiple choice

A data analyst reports being unable to run the query shown in the exhibit. The data governance team reviews the access control policy. Which of the following is the most likely explanation for the denied access?

Exhibit

Refer to the exhibit.

```
2024-11-20 10:23:45 [ACCESS_DENIED] user: analyst_john, query: SELECT email FROM customers WHERE id=123, reason: insufficient permissions on column 'email'
```

Trap 1: The user does not have SELECT privilege on the customers table

The log indicates column-level denial, not table-level.

Trap 2: The database administrator revoked the analyst role

There is no evidence of role revocation.

Trap 3: The query syntax is incorrect

The query syntax is valid.

A
The user does not have SELECT privilege on the customers table
Why wrong: The log indicates column-level denial, not table-level.
B
The database administrator revoked the analyst role
Why wrong: There is no evidence of role revocation.
C
Column-level security is preventing access to the email column
The log specifically mentions insufficient permissions on the email column.
D
The query syntax is incorrect
Why wrong: The query syntax is valid.

Question 5mediummulti select

A data analyst is evaluating data quality issues during acquisition. Which TWO issues are most likely to arise from merging data from different sources? (Select exactly 2)

Trap 1: User access permissions

Authorization issue.

Trap 2: Slow network speed

Performance issue, not data quality.

Trap 3: High storage cost

Not a direct data quality issue.

A
User access permissions
Why wrong: Authorization issue.
B
Duplicate records
Common when merging overlapping data.
C
Slow network speed
Why wrong: Performance issue, not data quality.
D
High storage cost
Why wrong: Not a direct data quality issue.
E
Formatting inconsistencies
Different sources have varying formats.

Question 6hardmultiple choice

A healthcare organization is subject to strict data privacy regulations requiring the classification of all data assets. The data governance team has identified three data sensitivity levels: Public, Internal, and Restricted. They have a new data pipeline importing patient health records from multiple clinics. The records include patient names, diagnoses, treatment codes, and insurance information. The team must ensure that the classification is applied correctly and that restricted data (e.g., diagnoses) is not exposed to unauthorized personnel. However, the pipeline uses automated tagging based on metadata rules, and some fields are misclassified. What is the most effective immediate action to improve classification accuracy?

Trap 1: Encrypt all data at rest and in transit regardless of…

Incorrect: Encryption protects data but doesn't correct classification errors.

Trap 2: Require manual review and reclassification of all incoming records.

Incorrect: Manual review is impractical for large volumes and pipelines.

Trap 3: Expand the metadata rule set to include more keywords and patterns.

Incorrect: Rules may still miss complex patterns; DLP offers deeper inspection.

A
Encrypt all data at rest and in transit regardless of classification.
Why wrong: Incorrect: Encryption protects data but doesn't correct classification errors.
B
Require manual review and reclassification of all incoming records.
Why wrong: Incorrect: Manual review is impractical for large volumes and pipelines.
C
Expand the metadata rule set to include more keywords and patterns.
Why wrong: Incorrect: Rules may still miss complex patterns; DLP offers deeper inspection.
D
Implement data loss prevention (DLP) tools that inspect content and enforce classification rules.
Correct: DLP can reclassify based on actual content, improving accuracy.