A financial services firm must comply with SEC regulations that require retaining certain records for seven years. The firm currently stores all data indefinitely. What should the data governance team do FIRST?

Create a retention schedule that categorizes data and assigns retention periods

Delete all data older than seven years immediately

Encrypt all stored data to protect it from unauthorized access

Purchase additional storage to accommodate indefinite retention

A company that processes credit card payments must comply with PCI DSS. Which practice is REQUIRED by PCI DSS regarding data retention?

Limiting retention of cardholder data to what is necessary for business or legal purposes

Keeping all transaction data for at least 10 years

Storing the full magnetic stripe data for fraud analysis

Encrypting cardholder data but never deleting it

An organization is preparing for a compliance audit. Which documentation set is MOST likely to satisfy the auditor's request for evidence of data governance?

Data retention policy, retention schedule, and audit logs of data access and deletion

Employee performance reviews and project management plans

Marketing materials and customer satisfaction surveys

Server hardware inventory and software license agreements

During an audit, the auditor asks for documentation that shows who accessed sensitive data and when. Which document should the organization provide?

Access logs from the data management system

The organization's data governance policy

What is the primary role of an audit in ensuring compliance with data governance standards?

To replace the need for data governance policies by providing a one-time review

To independently evaluate whether data management practices align with policies and regulations

To enforce data retention policies by automatically deleting expired data

To approve all data access requests within the organization

CompTIAData+

Domain 5Objective 2

Summarize Compliance Requirements DA0-001 Practice Questions (Page 4)

Part of the Data governance domain, which accounts for 14% of the DA0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

14%of the exam

Questions 16–20

16application · medium
A financial services firm must comply with SEC regulations that require retaining certain records for seven years. The firm currently stores all data indefinitely. What should the data governance team do FIRST?
Select an answer first
17application · medium
A company that processes credit card payments must comply with PCI DSS. Which practice is REQUIRED by PCI DSS regarding data retention?
Select an answer first
18application · medium
An organization is preparing for a compliance audit. Which documentation set is MOST likely to satisfy the auditor's request for evidence of data governance?
Select an answer first
19application · medium
During an audit, the auditor asks for documentation that shows who accessed sensitive data and when. Which document should the organization provide?
Select an answer first
20foundation · easy
What is the primary role of an audit in ensuring compliance with data governance standards?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DA0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DA0-001” is a trademark of its owner, used for identification only.