Secure and Govern Data and Access CERTIFIED-DATA-SCIENCE-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A data scientist downloads a dataset from a shared repository. To verify that the file has not been corrupted or tampered with during the download, which technique should be used?

   • AChecking the file's size in bytes
   • BComparing the file's SHA-256 hash to the published hash
   • CEncrypting the file with a public key
   • DOpening the file in a text editor to inspect the contents
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A data analyst needs to read a dataset but should not be able to modify or delete it. Which access control mechanism is most appropriate?

   • AGranting the analyst read-only permissions
   • BRequiring the analyst to authenticate with a password
   • CGranting the analyst full control permissions
   • DEncrypting the dataset with the analyst's public key
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A healthcare analytics team stores de-identified patient data in a cloud data lake. The team includes data scientists, data engineers, and a compliance officer. The compliance officer must be able to view the data catalog and audit logs but must not access the raw patient records. Data scientists need full read access to the raw data for modeling. Data engineers need to write and update the raw data. Which access control approach should be implemented?

   • AUse database-level permissions only, ignoring application-level access controls.
   • BAssign each user a single role that grants the combined permissions of all their job functions.
   • CCreate role-based access control (RBAC) roles for data scientist, data engineer, and compliance officer, and assign users to the appropriate role.
   • DGrant all users the same level of access to simplify management, since the data is de-identified.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A data science team uses a cloud-based data warehouse. The team includes contractors who should have temporary access to a subset of the data. The security team wants to ensure that contractors can only access the data they need and that their access is automatically revoked after the contract ends. Which approach should be used?

   • AProvide contractors with a VPN and rely on the network perimeter for security.
   • BGrant contractors the same permissions as full-time employees for simplicity.
   • CCreate a role with the minimum required permissions and assign contractors to that role, with a scheduled job to remove them from the role after the contract ends.
   • DUse a shared account for all contractors and change the password when a contractor leaves.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A data platform stores critical financial data. The security team wants to ensure that the data has not been tampered with and that any tampering is detectable. Which measure should be implemented?

   • AEncrypt the data at rest.
   • BUse role-based access control to restrict who can modify the data.
   • CEnable audit logging on the database.
   • DCreate a cryptographic hash of the data and store it securely.
   Reveal Solution Discussion Select an answer first