Secure and Govern Data and Access CERTIFIED-DATA-SCIENCE-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A financial services company must share a dataset containing customer names and account balances with an external analytics vendor. The vendor only needs to compute aggregate statistics and should not be able to identify individual customers. The company also wants to ensure that only authorized vendor employees can access the file. Which combination of measures should be used?

   • AEncrypt the file and provide the decryption key to the vendor's entire team.
   • BRemove the account balances and share only the names, as names alone are not sensitive.
   • CApply data masking to replace names with pseudonyms and encrypt the file, then share the decryption key only with the vendor's authorized analysts.
   • DUse hashing on the names and send the hashed values without encryption.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A data science team works with a mix of public and confidential datasets. The team wants to ensure that only authorized users can access the confidential datasets while keeping the public datasets open. Which approach should be used?

   • AUse role-based access control to grant access to confidential datasets only to specific roles, and leave public datasets open.
   • BMove confidential datasets to a separate system with no network access.
   • CApply the same access controls to all datasets for simplicity.
   • DEncrypt all datasets and share the decryption key with everyone.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A data engineer needs to protect sensitive values in a dataset before sharing it with a third-party vendor for testing. The vendor requires realistic data but does not need the actual values. Which technique is most appropriate?

   • AData masking
   • BHashing
   • CTokenization
   • DEncryption
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A data engineering team is building a pipeline that moves data from an on-premises database to a cloud data warehouse. The data contains personally identifiable information (PII). The team needs to ensure the data is protected during transit and that any unauthorized changes are detected. Which measures should be implemented?

   • AUse a VPN for the transfer and rely on the cloud provider's security.
   • BCompress the data before transfer and decompress after.
   • CUse a dedicated network connection and skip encryption.
   • DUse TLS for the data transfer and compute a hash of the data before and after the transfer.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A data platform uses role-based access control (RBAC) to manage permissions. What is the primary benefit of assigning permissions to roles rather than directly to individual users?

   • AIt simplifies permission management by grouping users with similar job functions
   • BIt eliminates the need for authentication
   • CIt prevents any user from modifying data
   • DIt ensures that all users have the same level of access
   Reveal Solution Discussion Select an answer first