Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How does role-based access control (RBAC) determine what a user can access?

   • ABy evaluating the sensitivity level of the data and the user's clearance
   • BBy assigning permissions directly to each individual user
   • CBy granting permissions based on the user's job function or role within the organization
   • DBy allowing the data owner to decide access on a case-by-case basis
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which statement best describes the primary purpose of access control mechanisms in data protection?

   • ATo monitor and log all user activities for audit purposes
   • BTo encrypt all data at rest and in transit automatically
   • CTo physically secure data centers and server rooms
   • DTo ensure that only authorized users or systems can view or modify data
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A multinational corporation is implementing a new access control policy. The compliance team requires that access to personally identifiable information (PII) be granted only to employees who have completed privacy training. The HR department wants to ensure that managers can access PII for their direct reports, but not for other employees. The IT team wants to minimize the number of policy changes when employees change roles. Which access control model best satisfies all these requirements?

   • ADiscretionary access control (DAC), where each employee is the owner of their PII and can grant access to their manager.
   • BAttribute-based access control (ABAC), using attributes for 'training completed' and 'manager of' to evaluate access requests.
   • CRole-based access control (RBAC), creating a role for 'Trained Manager' with access to all PII.
   • DMandatory access control (MAC), using security labels for 'PII' and 'Non-PII'.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a common use case for data masking?

   • ACompressing data to save storage space
   • BAuthenticating users to a database
   • CEncrypting data during transmission over the internet
   • DProtecting sensitive data in non-production environments like testing
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A bank's customer service application displays customer account information. The bank wants to ensure that customer service representatives can see the customer's full name and account balance, but only the last four digits of their social security number. The data should be masked in real-time as it is displayed. Which technique should be used?

   • AEncrypt the social security number column and have the application decrypt it for display.
   • BCreate a static masked copy of the customer database and have the application query that copy.
   • CConfigure dynamic data masking on the social security number column, defining a mask that shows only the last four digits for the 'Customer Service' role.
   • DUse a view that selects the full social security number but relies on the application to hide it.
   Reveal Solution Discussion Select an answer first