Secure and Govern Data and Access CERTIFIED-DATA-SCIENCE-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A healthcare company must share patient data with a research partner. The data includes direct identifiers (names, addresses) and clinical measurements. The partner needs to perform statistical analysis but does not need to know patient identities. The company also wants to ensure that the data is not altered during transfer and that only the partner's authorized researchers can access it. Which approach best meets these requirements?

   • ARemove direct identifiers, encrypt the dataset, and share the decryption key only with the partner's authorized researchers.
   • BHash the direct identifiers and share the hashed dataset without encryption.
   • CEncrypt the dataset and share the decryption key with the partner's entire organization.
   • DUse a secure file transfer protocol (SFTP) and rely on the partner's internal access controls.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A data science team stores a dataset containing personally identifiable information (PII) in a cloud storage bucket. To protect the data from unauthorized access, which technique is most directly applied to the data itself?

   • AEncrypting the data at rest using a symmetric key
   • BAnonymizing the data by removing direct identifiers
   • CGenerating a hash of the data and storing it separately
   • DSetting a bucket policy that allows only the data science team
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A data platform ingests data from multiple sources. The compliance team requires that any modification to the data be detectable and that only authorized ETL jobs can write to the platform. The platform currently uses a shared service account for all ETL jobs. Which combination of changes should be implemented?

   • AKeep the shared service account but enable audit logging.
   • BCreate a separate service account for each ETL job, enable audit logging, and compute checksums on the data after each load.
   • CUse a single service account and encrypt the data at rest.
   • DGrant write access to all users and rely on the database's built-in integrity checks.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An organization must demonstrate that its data has not been altered after a specific point in time. Which combination of measures best supports this requirement?

   • AHashing the data and maintaining an audit trail of access and changes
   • BBacking up the data to a separate location
   • CMasking the data and restricting access to authorized users
   • DEncrypting the data and storing the key separately
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A retail company needs to share sales data with a marketing agency for analysis. The data includes customer email addresses. The company wants to minimize the risk of exposing personal data while still allowing the agency to perform the analysis. Which approach should be used?

   • AReplace email addresses with pseudonymous identifiers before sharing the data.
   • BEncrypt the email addresses and provide the decryption key to the agency.
   • CRemove all data except the email addresses.
   • DShare the data over a secure file transfer protocol (SFTP) without any additional measures.
   Reveal Solution Discussion Select an answer first