Data Governance CAS-005 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A software company is developing a new mobile app that collects user location data. The development team wants to use real user data to test the app's features. The data governance team has mandated that data protection by design and by default be implemented. What is the most effective way to comply with this mandate during development?

   • AEncrypt all location data stored on the device and in transit.
   • BObtain explicit consent from users before collecting any location data.
   • CAllow users to opt out of location data collection in the app's settings.
   • DCollect only the minimum amount of location data necessary for the app's core functionality.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A healthcare organization is migrating its patient records to a new cloud-based EHR system. The compliance team requires that all protected health information (PHI) be encrypted at rest and in transit, and that access to PHI be logged and auditable. The data governance team must implement a policy that ensures these requirements are met consistently across all production environments. Which approach best satisfies the requirement?

   • AImplement a data loss prevention (DLP) tool that blocks all outbound PHI traffic and rely on the tool's reports for auditing.
   • BUse a database-level encryption feature and grant the compliance team direct access to the production database for manual audits.
   • CDefine a data classification schema, implement centralized encryption key management, and enable detailed audit logging for all PHI access.
   • DConfigure the EHR application to enforce encryption and rely on the cloud provider's default audit logging.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A manufacturing company is implementing a new enterprise resource planning (ERP) system. The QA team is responsible for ensuring that the data migrated from the legacy system is accurate and complete. The data governance team has defined data quality rules. What is the most effective way for the QA team to validate the migrated data?

   • ARun automated data validation scripts that check the migrated data against the defined quality rules.
   • BPerform a manual review of all migrated data to ensure it meets the quality rules.
   • CCompare a sample of the migrated data against the source data to check for discrepancies.
   • DRely on the ERP vendor's data migration tools to ensure data quality.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A QA team is testing a new financial application and needs to verify that the application correctly calculates interest rates. The test environment contains a copy of production data. The data governance team is concerned about data integrity and security. What is the most important control to implement in this testing phase?

   • AEnsure the test data is refreshed from production daily to keep it current.
   • BImplement data masking on the test data to protect sensitive fields while preserving the data's integrity for testing.
   • CRestrict access to the test environment to only the QA team members.
   • DUse a separate database instance for testing to avoid interfering with production.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which activity is an example of data governance supporting QA to maintain compliance?

   • AConfiguring network firewalls
   • BWriting unit tests for application code
   • CDesigning the user interface layout
   • DConducting data quality audits against defined policies
   Reveal Solution Discussion Select an answer first