Governance and Compliance DS0-001 Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which of the following is a primary goal of implementing data loss prevention (DLP) strategies in a database environment?

   • ATo prevent unauthorized access to and loss of sensitive data.
   • BTo improve query performance by indexing frequently accessed columns.
   • CTo ensure database backups are stored in a different geographic region.
   • DTo provide a graphical interface for database administrators to manage user accounts.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare organization stores patient records in a database that is accessed by clinical staff. The compliance officer requires that any export of patient data to removable media be blocked, while still allowing authorized staff to view and update records within the application. Which control should be implemented?

   • AImplement a Data Loss Prevention (DLP) solution that monitors and blocks data transfers to USB drives and other removable media.
   • BConfigure a database trigger that logs all SELECT statements on the patient table.
   • CEncrypt the patient database at rest using Transparent Data Encryption (TDE).
   • DRestrict all clinical staff to read-only access on the patient database.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company that processes credit card payments is designing a new database. To minimize PCI DSS scope, which design decision is most effective?

   • AImplement strict access controls on the database.
   • BStore cardholder data in a separate database that is isolated from the rest of the network.
   • CEncrypt all cardholder data in the database.
   • DUse tokenization so that the database stores only tokens, not actual cardholder data.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A database administrator needs to implement a DLP strategy for a database that contains personal data of EU citizens. The company has a policy that requires data to be encrypted at rest and in transit. Which additional control is most important to prevent data loss?

   • AImplement database activity monitoring to detect unusual access patterns.
   • BUse a web application firewall (WAF) to protect the database application.
   • CImplement strong encryption for data at rest and in transit.
   • DRestrict database access to only the necessary personnel and use least privilege.
   Reveal Solution Discussion Select an answer first