A university is implementing a new student information system. The IT department needs to ensure that professors can only view grades for their own courses, while registrars can view and update all student records. Which access control model should be configured?

Attribute-based access control, granting access based on the professor's department and years of service.

Mandatory access control, using security labels such as 'Confidential' and 'Top Secret' on all student records.

Discretionary access control, where each professor is the owner of their grade book and can grant access to other professors.

Role-based access control, assigning professors a 'Faculty' role with course-scoped permissions and registrars an 'Administrator' role with full record permissions.

Which practice is part of good encryption key management?

Sharing keys with all employees for convenience

Storing keys in plain text next to the encrypted data

Regularly rotating encryption keys

Using the same key for all systems to simplify management

What is the primary role of encryption in protecting data privacy?

To make data unreadable to unauthorized parties

To create backups of data automatically

To permanently delete data from storage

To verify the identity of users accessing data

A government agency encrypts all sensitive files using AES-256. The security officer is concerned about the risk of a single point of failure if the encryption key is lost or compromised. Which key management practice should be implemented to mitigate this risk?

Share the encryption key with all authorized staff so that multiple people have a copy.

Store the key in the same database as the encrypted files for easy access.

Store a backup of the encryption key in a separate, physically secure location from the primary key.

Use a weaker encryption algorithm that is easier to remember and manage.

Which scenario is a typical application of asymmetric encryption?

Encrypting a large database file at rest

Securing email with a digital signature

Encrypting data in a VPN tunnel

CompTIAData+

Domain 5Objective 3

Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 2)

Part of the Data governance domain, which accounts for 14% of the DA0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

14%of the exam

Questions 6–10

6application · medium
A university is implementing a new student information system. The IT department needs to ensure that professors can only view grades for their own courses, while registrars can view and update all student records. Which access control model should be configured?
Select an answer first
7foundation · easy
Which practice is part of good encryption key management?
Select an answer first
8foundation · easy
What is the primary role of encryption in protecting data privacy?
Select an answer first
9application · medium
A government agency encrypts all sensitive files using AES-256. The security officer is concerned about the risk of a single point of failure if the encryption key is lost or compromised. Which key management practice should be implemented to mitigate this risk?
Select an answer first
10foundation · easy
Which scenario is a typical application of asymmetric encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DA0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DA0-001” is a trademark of its owner, used for identification only.