Governance and Compliance DS0-001 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Under the General Data Protection Regulation (GDPR), which of the following is a right granted to data subjects?

   • AThe right to request the erasure of their personal data under certain conditions.
   • BThe right to require that all personal data be stored exclusively within the European Union.
   • CThe right to demand that their personal data be transferred to any third party without restrictions.
   • DThe right to prevent any processing of personal data without exception.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is preparing for a PCI DSS audit. The auditor notes that the company stores the full magnetic stripe data of credit cards in its database. What is the most appropriate action to achieve compliance?

   • ATokenize the magnetic stripe data and store the token.
   • BMask the magnetic stripe data so only the last four digits are visible.
   • CEncrypt the magnetic stripe data in the database.
   • DDelete the magnetic stripe data and ensure it is not stored after authorization.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial institution is implementing a DLP strategy to protect cardholder data in its database. Which measure is most effective in preventing unauthorized access to the data?

   • AEncrypt the database files at the operating system level.
   • BEnable database auditing to log all queries.
   • CUse a VPN for all remote database connections.
   • DImplement role-based access control (RBAC) and least privilege for database users.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company's data retention policy states that customer records should be retained for seven years. The database administrator discovers that some records are older than seven years. What should the DBA do?

   • AImmediately delete all records older than seven years.
   • BReview the policy for any legal holds, then delete or archive the records according to the policy.
   • CExtend the retention period to ten years for all records.
   • DArchive the records to a separate storage system and keep them indefinitely.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A database administrator is tasked with reducing the risk of sensitive data being exfiltrated through email. Which strategy is specifically designed to detect and block unauthorized transmission of sensitive data?

   • AImplementing role-based access control (RBAC) to restrict database permissions.
   • BData Loss Prevention (DLP) policies that inspect outbound content for patterns such as credit card numbers or personal identifiers.
   • CEncrypting all data at rest using Transparent Data Encryption (TDE).
   • DConfiguring database audit logs to record all SELECT statements.
   Reveal Solution Discussion Select an answer first