46 questions · Data Life Cycle Management · All types, answers revealed
Which THREE tasks are associated with 'Data Classification' during the life cycle?
The first step in classification.
Why this answer
Identifying data, assigning a label, and applying specific policy rules are the steps in classification.
Which TWO metrics are used to measure the effectiveness of data minimization?
Less data stored is a direct indicator of minimization.
Why this answer
Reduction in total storage and the volume of PII-containing records are standard minimization metrics.
In Google Cloud Data Loss Prevention (DLP), which transformation method should be applied to a column containing email addresses to maintain format while ensuring privacy?
This keeps the email format while encrypting the content.
Why this answer
Pseudonymization (using a crypto-hash or format-preserving encryption) allows the email structure to persist while the real identity is hidden.
When conducting a Privacy Impact Assessment (PIA) for a new application, what is the role of 'Data Mapping'?
Mapping shows where data moves and resides, critical for assessing risk.
Why this answer
Data mapping identifies the flow and storage locations, which is the foundation for conducting a meaningful PIA.
When classifying data for privacy, what does a 'Restricted' label usually signify?
Restricted data is sensitive and needs limited, controlled access.
Why this answer
Restricted data is highly sensitive and requires strict access controls and specific handling to prevent unauthorized access.
When establishing a data disposal policy in Informatica Enterprise Data Catalog, what must be configured to ensure the disposal process is auditable?
Enabling audit logs ensures that every deletion action is logged with a timestamp and user ID.
Why this answer
Audit logs within the Informatica platform ensure that data deletion events are recorded for compliance purposes.
Which TWO methods are commonly used to achieve data minimization in a legacy database?
Removes the link to the identity, minimizing privacy risk.
Why this answer
Anonymization and data purging are direct methods to reduce the footprint of sensitive data.
A practitioner is setting up data minimization. Which feature in Google Cloud Spanner helps ensure that data is stored in specific regions for local compliance?
This allows control over data geography.
Why this answer
Spanner uses 'Placement Policies' (or node configurations) to dictate where data is stored, supporting data residency compliance.
What is the primary function of a 'Data Inventory' in a privacy program?
An inventory provides the 'where, why, and what' for privacy management.
Why this answer
A data inventory acts as the master record of what data exists, where it is, and who owns it, serving as the basis for all life cycle activities.
Which TWO outcomes result from effective data classification?
Allows applying tighter controls to sensitive data.
Why this answer
Classification enables targeted security controls and informs retention requirements.
Which THREE factors should be considered when defining a data retention schedule?
Laws often dictate mandatory retention periods.
Why this answer
Legal requirements, business utility, and statutory limitations are the core drivers of any retention policy.
In the context of data classification, which metadata field is most critical for determining the disposal date?
This is the specific field that drives the disposal timer.
Why this answer
The 'Created Date' or 'Last Modified' field is the baseline for calculating the disposal date based on a fixed retention period.
When configuring AWS Macie to perform data minimization, which configuration is required to prevent the service from scanning internal metadata fields that do not contain customer PII?
Exclusion rules allow filtering out specific buckets or paths from discovery.
Why this answer
Exclusion rules in AWS Macie allow users to define paths or patterns to ignore, minimizing the scan footprint.
A privacy analyst is conducting a data map in ServiceNow. Which feature allows them to link a database table directly to a 'Processing Activity' record?
This feature connects technical data sources to business processing activities.
Why this answer
ServiceNow's Privacy Management module uses 'Data Source Mapping' to link IT assets to business processes.
When using Varonis to identify 'stale' data for minimization, what criteria must be defined to avoid false positives?
This is the primary metric for defining data as 'stale' or inactive.
Why this answer
Varonis requires defining the 'Last Accessed' timeframe to distinguish between actively used data and candidates for deletion.
Which of the following is a key objective of a data retention policy?
Retention policies limit the time data is held, reducing liability.
Why this answer
The primary objective is to maintain data only as long as necessary for business or legal reasons, supporting minimization.
In the privacy lifecycle, what does the term 'Data Collection' primarily involve?
Collection refers to the gathering phase.
Why this answer
Data collection is the entry point where PII is gathered from subjects, requiring notice and consent.
In a data warehouse, which technique is most effective for protecting PII during the ETL (Extract, Transform, Load) process while still allowing analytics?
Masking at ETL time balances the need for analytics with privacy protection.
Why this answer
Data masking during the transformation phase (ETL) allows analytical tools to process the records without seeing the actual PII.
A CDPSE practitioner is configuring a data discovery job in OneTrust to identify PII in a structured database. Which setting must be enabled to ensure the tool automatically masks the data upon discovery based on a predefined classification tag?
This feature directly applies masking logic to discovered sensitive data.
Why this answer
The 'Auto-Masking' feature in OneTrust Data Discovery allows for immediate protection based on classification labels.
In the context of the data lifecycle, what is the primary benefit of using a 'Data Catalog' tool like Alation?
Visibility is the key to lifecycle and minimization management.
Why this answer
A data catalog provides visibility into data lineage and ownership, which is crucial for lifecycle management.
In MongoDB, what is the most effective way to ensure data minimization regarding personally identifiable information?
Removing unneeded fields is the definition of data minimization.
Why this answer
Using 'Field Level Encryption' (FLE) ensures that only authorized processes see the data, and dropping unused fields from the collection schema reduces storage of unnecessary data.
You are managing data in a Kubernetes environment. What strategy should be used to support data minimization for ephemeral pods?
This ensures data is wiped when the pod stops, minimizing data footprint.
Why this answer
Using temporary storage volumes (emptyDir) ensures that data is deleted automatically when the pod is terminated.
In Snowflake, what is the effect of using a 'Dynamic Data Masking' policy on a column containing PII when a non-authorized user runs a SELECT query?
Dynamic masking ensures the user sees only protected data at query time.
Why this answer
The dynamic masking policy replaces the real data with a redacted version (e.g., NULL or XXX) at query time without altering the underlying storage.
Which TWO attributes are essential to include in a data mapping register for privacy compliance?
Required for transparency and accountability.
Why this answer
Knowing the purpose (why) and the location (where) is foundational for privacy accountability.
During a data minimization project, you use Privacera to filter access to specific columns in a Hive table. Which mechanism is used to enforce this policy?
Privacera integrates with Ranger to enforce fine-grained access policies.
Why this answer
Privacera leverages Apache Ranger policies to enforce column-level access control (CLAC) to minimize data exposure.
When performing a data minimization assessment, which feature in Oracle Data Safe helps identify excessive data collection by flagging columns that contain sensitive data but are rarely queried?
This allows practitioners to identify columns that are never accessed, supporting minimization.
Why this answer
Data Safe's 'Data Activity Auditing' combined with 'Sensitive Data Discovery' identifies unused sensitive data columns.
Which TWO activities are involved in the 'data mapping' life cycle phase?
Shows the movement of data between systems.
Why this answer
Identifying data sources and defining data flows are core to mapping.
When configuring a 'Data Disposal' process, why is it critical to verify the 'Chain of Custody'?
Verification is the final step in the disposal process to prove compliance.
Why this answer
Chain of custody ensures that data was tracked throughout its existence until secure destruction, providing evidence for compliance.
During a data mapping exercise in BigID, you need to identify data that has exceeded its retention period. Which attribute should be used to filter the data inventory?
This field tracks when data is eligible for disposal according to policy.
Why this answer
The 'Last Modified' or 'Age' attribute is used to calculate retention compliance status in data inventory tools.
Which TWO options represent common risks when data life cycle management is not implemented?
Failure to dispose of data properly leads to fines.
Why this answer
Compliance fines and increased data breach impact are major consequences of failed lifecycle management.
Which THREE techniques effectively protect data during the 'use' phase of the life cycle?
Replaces identifiers to allow processing without direct link to identity.
Why this answer
Encryption, masking, and pseudonymization are standard techniques for protecting data during active processing.
When managing data retention in Azure Data Lake Storage (ADLS) Gen2, how do you implement a policy that deletes files older than 7 years?
This is the native, intended method for managing ADLS object aging.
Why this answer
Lifecycle management policies in ADLS allow you to define rules to delete blobs based on the number of days since last modification.
Which TWO technical methods ensure data integrity during the life cycle?
Detects data corruption.
Why this answer
Checksums and digital signatures ensure that data has not been tampered with or corrupted.
Which TWO of the following are primary pillars of the Data Life Cycle Management?
The end of the life cycle.
Why this answer
Data collection and disposal are two critical phases in the lifecycle that require specific privacy controls.
Which THREE types of data are typically targeted for aggressive minimization?
Provides no value and increases storage and risk.
Why this answer
PII, sensitive financial data, and redundant/outdated data are the primary targets for minimization.
You are using AWS Macie to perform a classification scan. Which feature should be configured to notify the privacy team when sensitive data is found?
EventBridge is the standard way to trigger alerts from Macie findings.
Why this answer
Macie triggers 'EventBridge' alerts that can be routed to notification services like SNS.
You are utilizing Microsoft Purview to enforce a retention label on a SharePoint site. What occurs when the retention period expires?
When configured, the retention label triggers permanent removal.
Why this answer
Purview retention labels can be configured to 'Automatically delete' content once the retention period ends.
When using IBM InfoSphere Information Governance Catalog to map sensitive data, what is the primary purpose of a 'Data Class'?
Data classes provide the pattern definitions (regex/logic) for automated classification.
Why this answer
Data classes define the structure of data (e.g., Credit Card Number) to allow automated identification in the catalog.
Which tool within the SAP Data Intelligence suite is most appropriate for defining the lifecycle of data objects based on their business value?
This tool helps categorize and manage data lifecycle attributes.
Why this answer
The 'Metadata Explorer' in SAP Data Intelligence allows users to view and categorize data based on lifecycle stages.
In Collibra, you are mapping a data element to a business term to support data minimization. What is the effect of changing the 'Data Stewardship' workflow status to 'Deprecated'?
Deprecation effectively hides the data from the business catalog, reducing unnecessary usage.
Why this answer
Deprecation in Collibra removes the asset from active discovery catalogs, preventing further use and supporting minimization.
When using Talend Data Fabric for data life cycle management, what is the function of the 'Data Stewardship' component?
It facilitates manual review of records identified during the lifecycle.
Why this answer
It provides a platform for data stewards to manually review and remediate data that failed quality or privacy checks.
You are configuring a data retention policy in AWS S3 Lifecycle rules. Which action should be selected to minimize data storage costs while remaining compliant with privacy laws?
This moves data to cheaper storage while retaining it for compliance.
Why this answer
Transitioning objects to 'Glacier Instant Retrieval' minimizes cost while keeping data available for audits.
Which THREE actions are part of a secure data disposal process?
Confirms the process worked.
Why this answer
Verification, documentation, and technical wiping are essential for compliant disposal.
Which THREE components should be included in a data inventory to ensure it is actionable for DSR (Data Subject Request) fulfillment?
Helps locate the data to process the request.
Why this answer
To fulfill a DSR, you must know what the data is, who owns it, and where it resides.
While using the Salesforce Data Masking tool, which option should be selected to ensure that production data copied to a sandbox is rendered unusable for unauthorized parties?
This replaces sensitive values with scrambled data, rendering it unusable for production identification.
Why this answer
Salesforce Data Masking allows choosing 'Masking' algorithms (e.g., Anonymization) to replace real data with fake values.
You are managing Azure Information Protection (AIP) labels. Which action is necessary to ensure that documents classified as 'Highly Confidential' are automatically encrypted?
Protection settings within the sensitivity label allow for automatic encryption.
Why this answer
In AIP, label configuration requires selecting 'Encrypt' under the 'Protection' settings to enforce technical controls.
Ready to test yourself?
Try a timed practice session using only Data Life Cycle Management questions.