A company's security policy requires that access to the HR database be granted only to HR staff and that all access attempts be logged. The system administrator is configuring the database. Which combination of controls should be implemented?

Implement role-based access control (RBAC) to grant the 'HR Staff' role access, and enable database auditing to log all login and query attempts.

Encrypt the database and give the encryption key to all employees.

Use a shared account for the HR department and enable logging for that account.

Grant all employees access to the database but require them to use a VPN.

A data engineering team needs to provide a development team with a copy of a production database for testing. The copy must contain realistic data, but the team must not be able to infer the actual values of sensitive fields like customer names and email addresses. The development team will need to run complex queries that rely on the data's structure and relationships. Which masking strategy is most appropriate?

Encrypt the sensitive columns in the production database and give the development team the decryption key.

Use static data masking to replace sensitive values with realistic, randomly generated but consistent substitutes (e.g., using a lookup table to map real names to fake names).

Use dynamic data masking on the production database and grant the development team access to it.

Delete the sensitive columns from the copy and replace them with NULL values.

In which scenario is dynamic data masking most useful?

When data is being transmitted over an unsecured network

When different users need to see different levels of sensitive data in a shared database

When data must be permanently anonymized for public release

When data needs to be compressed for storage efficiency

CompTIAData+

Domain 5Objective 3

Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 3)

Part of the Data governance domain, which accounts for 14% of the DA0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

14%of the exam

Questions 11–15

11foundation · easy
Which data masking method replaces sensitive data with fictional but realistic values?
Select an answer first
12application · medium
A company's security policy requires that access to the HR database be granted only to HR staff and that all access attempts be logged. The system administrator is configuring the database. Which combination of controls should be implemented?
Select an answer first
13foundation · easy
Which of the following is a common type of access control mechanism used to protect data?
Select an answer first
14expert · hard
A data engineering team needs to provide a development team with a copy of a production database for testing. The copy must contain realistic data, but the team must not be able to infer the actual values of sensitive fields like customer names and email addresses. The development team will need to run complex queries that rely on the data's structure and relationships. Which masking strategy is most appropriate?
Select an answer first
15foundation · easy
In which scenario is dynamic data masking most useful?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DA0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DA0-001” is a trademark of its owner, used for identification only.

Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 3)

Questions 11–15

Which data masking method replaces sensitive data with fictional but realistic values?

A company's security policy requires that access to the HR database be granted only to HR staff and that all access attempts be logged. The system administrator is configuring the database. Which combination of controls should be implemented?

Which of the following is a common type of access control mechanism used to protect data?

In which scenario is dynamic data masking most useful?

Keep studying — Data governance