Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A retail company needs to provide its customer service team with access to a production database for troubleshooting. The team should see customer names and order details, but credit card numbers must be hidden. The data must remain in its original format for the team to perform their work without altering the underlying database. Which technique should be used?

   • AConfigure dynamic data masking on the credit card column so that only authorized users see the full value, while the customer service role sees a masked version.
   • BCreate a static, anonymized copy of the database where credit card numbers are replaced with random values.
   • CEncrypt the credit card column with a key that the customer service team does not have.
   • DRemove the credit card column from the database entirely and store it in a separate, secure system.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A small law firm has a shared network drive containing client documents. The partners want to ensure that only the specific lawyer assigned to a case can access the corresponding case file, while support staff can access only administrative files. Which access control approach is most appropriate for this requirement?

   • AApply mandatory access control (MAC) with security labels for 'Client Confidential' and 'Internal'.
   • BUse role-based access control (RBAC) with roles for 'Lawyer' and 'Support Staff'.
   • CGive each lawyer full access to all case files and rely on a policy that they should only open their own cases.
   • DImplement attribute-based access control (ABAC), using attributes such as 'case assignment' and 'job title' to define access policies.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A new employee joins the marketing team. The IT administrator needs to grant the employee access to the marketing department's shared folder and the company's marketing analytics tool. The administrator should not have to configure each resource individually. Which approach should the administrator take?

   • AGrant the employee individual permissions to the shared folder and the analytics tool.
   • BAdd the employee to the 'Marketing' role in the identity management system, which has pre-configured permissions for the shared folder and analytics tool.
   • CGive the employee the password to the marketing department's shared account.
   • DCreate a new security group for the employee and add the employee to it, but do not assign any permissions to the group.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An e-commerce company needs to protect credit card data transmitted between a customer's browser and its web server. The security team also wants to ensure that the data is unreadable if the database is stolen. Which combination of controls should be used?

   • AUse data masking on the credit card column and store the data in a separate database.
   • BUse only database encryption and rely on the web server's HTTPS for data in transit.
   • CUse only TLS/SSL for data in transit and rely on network firewalls to protect the database.
   • DUse TLS/SSL for data in transit and encrypt the database with Transparent Data Encryption (TDE) for data at rest.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a key benefit of using role-based access control (RBAC) for data privacy?

   • AIt allows users to share data freely with anyone in the organization
   • BIt automatically detects and prevents all insider threats
   • CIt eliminates the need for encryption on sensitive data
   • DIt ensures that users only have access to data necessary for their job duties
   Reveal Solution Discussion Select an answer first