A company is decommissioning old hard drives that contain sensitive customer data. Which method is most appropriate to ensure the data is permanently destroyed?

Deleting the files and emptying the recycle bin

Formatting the drives with a quick format

A company needs to share a database with a third-party vendor for a limited-time project. The database contains customer names and addresses. The company wants to ensure that the vendor cannot permanently retain the data after the project ends. Which approach best addresses this requirement?

Provide the vendor with a masked version of the database

Require the vendor to sign a contract stating they will delete the data

Encrypt the database and provide the decryption key to the vendor

Send the data over a secure TLS connection

A hospital is implementing a new electronic health record (EHR) system. The system will store patient data in a database. The hospital's security policy requires that patient data be encrypted at rest. The database administrator is considering using application-level encryption. What is a significant drawback of this approach compared to transparent data encryption (TDE)?

Application-level encryption is less secure than TDE

Application-level encryption does not protect data in transit

Application-level encryption cannot be used with cloud databases

Application-level encryption requires changes to the application code and may impact query performance

A database administrator is tasked with destroying data on a laptop that was used to access a database containing confidential information. The laptop has an SSD. The administrator wants to ensure the data is unrecoverable before the laptop is donated to a charity. Which method is the most appropriate?

Delete the database files and empty the recycle bin

Use the SSD's built-in secure erase feature

Use a degausser to erase the SSD

Reformat the SSD and reinstall the operating system

CompTIADataSys+

Domain 4Objective 1

Data Security Concepts DS0-001 Practice Questions (Page 1)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

23%of the exam

Questions 1–5

1foundation · easy
A company is decommissioning old hard drives that contain sensitive customer data. Which method is most appropriate to ensure the data is permanently destroyed?
Select an answer first
2expert · hard
A company needs to share a database with a third-party vendor for a limited-time project. The database contains customer names and addresses. The company wants to ensure that the vendor cannot permanently retain the data after the project ends. Which approach best addresses this requirement?
Select an answer first
3expert · hard
A hospital is implementing a new electronic health record (EHR) system. The system will store patient data in a database. The hospital's security policy requires that patient data be encrypted at rest. The database administrator is considering using application-level encryption. What is a significant drawback of this approach compared to transparent data encryption (TDE)?
Select an answer first
4foundation · easy
A database administrator needs to provide a test dataset to developers that contains realistic-looking but not real customer information. Which technique should be used?
Select an answer first
5expert · medium
A database administrator is tasked with destroying data on a laptop that was used to access a database containing confidential information. The laptop has an SSD. The administrator wants to ensure the data is unrecoverable before the laptop is donated to a charity. Which method is the most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.

Data Security Concepts DS0-001 Practice Questions (Page 1)

Questions 1–5

A company is decommissioning old hard drives that contain sensitive customer data. Which method is most appropriate to ensure the data is permanently destroyed?

A company needs to share a database with a third-party vendor for a limited-time project. The database contains customer names and addresses. The company wants to ensure that the vendor cannot permanently retain the data after the project ends. Which approach best addresses this requirement?

A database administrator needs to provide a test dataset to developers that contains realistic-looking but not real customer information. Which technique should be used?

Keep studying — Data and database security