A data analyst needs to provide a subset of production data to a machine learning team for model training. The data includes personally identifiable information (PII). The analyst wants to preserve the statistical relationships in the data for model accuracy but must ensure the PII cannot be traced back to real individuals. Which masking approach best balances these requirements?

Replace all PII with random values

Encrypt the PII columns and provide the encryption key to the ML team

Delete all PII columns from the dataset

Use tokenization, replacing PII with unique tokens that preserve referential integrity

Which of the following is the primary purpose of using encryption in transit for database communications?

To ensure data confidentiality while it is being transferred between systems

To prevent unauthorized access to data stored on the database server's hard drive

To permanently delete data that is no longer needed

To hide sensitive data from users who are authorized to access the database

A company stores backup files on a tape library. To protect the data if a tape is lost or stolen, which approach should be used?

Use TLS when writing data to the tape

Apply data masking to the backup files

Encrypt the data on the tapes using encryption at rest

Degauss the tapes after each backup

A database administrator needs to destroy data on a set of solid-state drives (SSDs) that are being removed from a high-security environment. The SSDs contain classified data. The administrator has access to a degausser. What is the primary limitation of using a degausser on SSDs?

Degaussing is ineffective on SSDs because they do not use magnetic storage

Degaussing only works on HDDs and tape, but it is still the best method for SSDs

Degaussing is too slow for large-capacity SSDs

Degaussing leaves residual data that can be recovered with specialized equipment

A financial services firm needs to provide a development team with a copy of the production customer database for testing a new reporting feature. The test environment is not as tightly secured as production. The firm must ensure that real customer names, email addresses, and account balances are not exposed to developers. What is the most appropriate approach?

Encrypt the database backup before restoring it into the test environment

Use TLS to connect to the test database from developer workstations

Create a test copy and apply data masking to replace names, emails, and balances with realistic but fictitious values

Restore the production backup to the test environment and restrict network access to the database

CompTIADataSys+

Domain 4Objective 1

Data Security Concepts DS0-001 Practice Questions (Page 3)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

23%of the exam

Questions 11–15

11expert · hard
A data analyst needs to provide a subset of production data to a machine learning team for model training. The data includes personally identifiable information (PII). The analyst wants to preserve the statistical relationships in the data for model accuracy but must ensure the PII cannot be traced back to real individuals. Which masking approach best balances these requirements?
Select an answer first
12foundation · easy
Which of the following is the primary purpose of using encryption in transit for database communications?
Select an answer first
13foundation · easy
A company stores backup files on a tape library. To protect the data if a tape is lost or stolen, which approach should be used?
Select an answer first
14application · medium
A database administrator needs to destroy data on a set of solid-state drives (SSDs) that are being removed from a high-security environment. The SSDs contain classified data. The administrator has access to a degausser. What is the primary limitation of using a degausser on SSDs?
Select an answer first
15application · medium
A financial services firm needs to provide a development team with a copy of the production customer database for testing a new reporting feature. The test environment is not as tightly secured as production. The firm must ensure that real customer names, email addresses, and account balances are not exposed to developers. What is the most appropriate approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.

Data Security Concepts DS0-001 Practice Questions (Page 3)

Questions 11–15

Which of the following is the primary purpose of using encryption in transit for database communications?

A company stores backup files on a tape library. To protect the data if a tape is lost or stolen, which approach should be used?

A database administrator needs to destroy data on a set of solid-state drives (SSDs) that are being removed from a high-security environment. The SSDs contain classified data. The administrator has access to a degausser. What is the primary limitation of using a degausser on SSDs?

Keep studying — Data and database security