Check Data Privacy, Compliance, and Access PMI-CPMAI Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A manufacturing company uses sensor data from its production lines to optimize efficiency. The data is stored in a data lake. The company's compliance team needs to document the data's origin and transformations for an internal audit. What should the team implement?

   • AA data encryption solution to protect the data at rest.
   • BA backup system that stores copies of the data at each stage.
   • CA data lineage tool that automatically captures the data's source, transformations, and usage.
   • DA role-based access control (RBAC) system to restrict who can access the data.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A media company licenses a proprietary image dataset for 'non-commercial research.' A data science team uses the dataset to train a model that will be embedded in a commercial product the company sells. What should the team do?

   • AProceed with training because research and development is part of the product lifecycle.
   • BAnonymize the images before training to avoid license restrictions.
   • CUse the dataset only for internal testing and not in the final product.
   • DContact the licensor to negotiate a commercial license or obtain written permission for the intended use.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A multinational bank wants to use customer transaction data to detect fraud. The data includes personal data of customers in multiple jurisdictions, including the EU. The bank's legal team is concerned about the lawful basis for processing and cross-border transfers. What should the bank do first?

   • AAnonymize the transaction data before processing to avoid regulatory requirements.
   • BProceed with the fraud detection because it is a legitimate interest of the bank.
   • CConduct a privacy impact assessment (PIA) to evaluate the processing's necessity, proportionality, and risks, including cross-border transfer mechanisms.
   • DStore all data in the EU and avoid any cross-border transfer.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A pharmaceutical company's data platform team is required to document the lineage of clinical trial data for regulatory audits. The team needs to track every transformation and access event. What should the team implement?

   • AA role-based access control (RBAC) system to restrict who can access the data.
   • BA data encryption solution to protect the data at rest.
   • CA data catalog that records metadata, including data source, transformations, and access logs.
   • DA backup system that stores copies of the data at each stage.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A logistics company uses a data platform to share shipment data with external partners. The company wants to ensure that partners can only access data for shipments they are involved in. What should the company implement?

   • ARow-level security (RLS) that filters shipment data based on the partner's identifier.
   • BColumn-level security that hides sensitive columns from partners.
   • CA data catalog that documents the shipment data lineage.
   • DA shared access key for all partners to access the data platform.
   Reveal Solution Discussion Select an answer first