Secure and Govern Data and Access CERTIFIED-DATA-SCIENCE-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's data science team uses a collaborative notebook environment. The team wants to ensure that only approved users can run code and that all code executions are logged for audit purposes. Which measures should be implemented?

   • AUse single sign-on (SSO) for authentication and enable audit logging on the notebook server.
   • BShare the notebook server's admin password with the team.
   • CUse a shared service account and rely on the notebook's built-in history.
   • DDisable logging to improve performance.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A data platform ingests data from multiple external sources. The data quality team wants to ensure that the data has not been corrupted during ingestion and that only approved data sources can push data. Which measures should be implemented?

   • ALog all ingestion events and review them monthly.
   • BEncrypt the data during ingestion and store it in a secure bucket.
   • CUse a firewall to restrict network access to the ingestion endpoint.
   • DCompute checksums on the data before and after ingestion, and use API keys to authenticate data sources.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A data science team needs to share a trained model with a business unit. The model was trained on sensitive data, and the team wants to ensure that the model file is not tampered with and that only authorized users can use it. Which approach should be taken?

   • AHash the model file and share the hash with the business unit.
   • BCompress the model file and share it via a public link.
   • CStore the model in a shared folder with read access for everyone in the company.
   • DSign the model file with a digital signature and encrypt it, then distribute the decryption key only to authorized users.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's data platform uses a shared service account for all data science team members to access the data lake. The security team is concerned about accountability and wants to know who accessed what data. Which change should be implemented?

   • ACreate individual user accounts with appropriate role-based access and disable the shared account.
   • BImplement multi-factor authentication for the shared account.
   • CUse a stronger password for the shared account.
   • DKeep the shared account but enable verbose logging on the data lake.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A data platform uses a centralized identity provider (IdP) for authentication. The data science team wants to implement fine-grained access control based on data sensitivity levels (e.g., public, internal, confidential). The security team requires that access decisions be made centrally and that all access attempts be logged. Which approach should be used?

   • AStore access control lists (ACLs) on each dataset and manage them manually.
   • BUse a shared service account with access to all data and rely on the IdP for authentication.
   • CImplement attribute-based access control (ABAC) using the IdP to evaluate user attributes and data sensitivity labels, and enable logging on the policy decision point.
   • DUse role-based access control (RBAC) with a role for each sensitivity level.
   Reveal Solution Discussion Select an answer first