What is the primary goal of data masking?

To encrypt data so that it cannot be read without a key

To protect data while it is being transmitted over a network

To permanently delete sensitive data from storage

To replace sensitive data with realistic but fictitious values

A security auditor is reviewing a database environment and finds that the database server accepts connections using both TLS and non-TLS protocols. The auditor recommends disabling the non-TLS protocols. What is the primary security reason for this recommendation?

Non-TLS protocols transmit data in plaintext, which can be intercepted and read by an attacker

Non-TLS protocols are incompatible with modern database clients

Non-TLS protocols are slower than TLS protocols

Non-TLS protocols do not support authentication

Which of the following is a recognized data destruction method for securely erasing data from a solid-state drive (SSD)?

Deleting the partition and recreating it

Overwriting the SSD with a single pass of zeros

Using the drive's built-in secure erase command

A company is migrating its on-premises database to a cloud provider. The cloud provider offers storage encryption by default. However, the company's security policy requires that the cloud provider cannot access the encryption keys. Which approach should the company take?

Implement client-side encryption before uploading the data

Use the cloud provider's default encryption and rely on their security guarantees

Encrypt the data in transit with TLS and rely on that for security

Use the provider's key management service to store the keys

Which of the following best describes the purpose of encryption at rest?

To hide sensitive data from users who have legitimate access to the database

To protect data from being intercepted while it is transmitted over a network

To protect data stored on disk, tape, or cloud storage from unauthorized access

To permanently erase data from storage devices

CompTIADataSys+

Domain 4Objective 1

Data Security Concepts DS0-001 Practice Questions (Page 2)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

23%of the exam

Questions 6–10

6foundation · easy
What is the primary goal of data masking?
Select an answer first
7expert · medium
A security auditor is reviewing a database environment and finds that the database server accepts connections using both TLS and non-TLS protocols. The auditor recommends disabling the non-TLS protocols. What is the primary security reason for this recommendation?
Select an answer first
8foundation · easy
Which of the following is a recognized data destruction method for securely erasing data from a solid-state drive (SSD)?
Select an answer first
9application · medium
A company is migrating its on-premises database to a cloud provider. The cloud provider offers storage encryption by default. However, the company's security policy requires that the cloud provider cannot access the encryption keys. Which approach should the company take?
Select an answer first
10foundation · easy
Which of the following best describes the purpose of encryption at rest?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.