A company is decommissioning a database server that contains sensitive financial data. The server has multiple hard drives in a RAID array. The compliance team requires that the data be destroyed before the server is disposed of. The company wants to reuse the server hardware for a non-production environment. Which data destruction method is most appropriate?

Perform a secure erase on each drive using the ATA Secure Erase command

Delete the RAID array and recreate it

Physically shred the hard drives

Format the drives with a quick format

A university is preparing a public dataset of student enrollment for a research project. The dataset includes student names, birth dates, and GPAs. To comply with privacy regulations, the university must ensure that individual students cannot be identified from the dataset. Which data masking technique should be applied?

Encrypt the entire dataset and publish the encryption key

Generalize birth dates to only the year of birth

Replace student names with unique random identifiers

Apply a combination of pseudonymization for names and generalization for birth dates

A database administrator needs to protect data as it is transmitted between an application server and a database server over an untrusted network. Which technology is specifically designed to secure data during transmission?

Transparent Data Encryption (TDE)

An e-commerce company stores customer order history in an on-premises SQL Server database. A recent audit found that the database files are stored in plaintext on the server's disk. The company wants to protect the data at rest without requiring changes to the applications that query the database. Which solution should be implemented?

Use Always Encrypted for all sensitive columns

Implement column-level encryption on the order amount column

Apply BitLocker to the server's operating system drive only

Enable Transparent Data Encryption (TDE) on the database

CompTIADataSys+

Domain 4Objective 1

Data Security Concepts DS0-001 Practice Questions (Page 4)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

23%of the exam

Questions 16–19

16expert · hard
A company is decommissioning a database server that contains sensitive financial data. The server has multiple hard drives in a RAID array. The compliance team requires that the data be destroyed before the server is disposed of. The company wants to reuse the server hardware for a non-production environment. Which data destruction method is most appropriate?
Select an answer first
17application · medium
A university is preparing a public dataset of student enrollment for a research project. The dataset includes student names, birth dates, and GPAs. To comply with privacy regulations, the university must ensure that individual students cannot be identified from the dataset. Which data masking technique should be applied?
Select an answer first
18foundation · easy
A database administrator needs to protect data as it is transmitted between an application server and a database server over an untrusted network. Which technology is specifically designed to secure data during transmission?
Select an answer first
19application · medium
An e-commerce company stores customer order history in an on-premises SQL Server database. A recent audit found that the database files are stored in plaintext on the server's disk. The company wants to protect the data at rest without requiring changes to the applications that query the database. Which solution should be implemented?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.

Data Security Concepts DS0-001 Practice Questions (Page 4)

Questions 16–19

A database administrator needs to protect data as it is transmitted between an application server and a database server over an untrusted network. Which technology is specifically designed to secure data during transmission?

Keep studying — Data and database security