Check Data Privacy, Compliance, and Access PMI-CPMAI Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   A team needs to ensure only authorized users can access a sensitive dataset. What is the most direct way to achieve this?

   • AImplement access controls and user permissions
   • BStore the dataset in a private cloud
   • CAnonymize the dataset before storing it
   • DEncrypt the dataset with a strong algorithm
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A telecom company processes customer call detail records (CDRs) for network optimization. The data includes personal data. The company's data protection officer (DPO) requires that only authorized network engineers can access the CDRs. What should the company implement?

   • AA privacy impact assessment (PIA) for the CDR processing.
   • BRole-based access control (RBAC) that grants network engineers access to CDRs and denies others.
   • CEncryption of the CDRs at rest.
   • DA data catalog that documents the CDR lineage.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When should a privacy impact assessment be conducted for a data usage project?

   • ABefore the project begins, as part of planning
   • BAfter the project is fully deployed
   • COnly when required by a customer
   • DOnly when a data breach occurs
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is data lineage documentation important for audit purposes?

   • AIt reduces the need for access controls
   • BIt ensures the data is stored in the correct format
   • CIt provides a clear record of how data was sourced and processed
   • DIt automatically encrypts the data
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A marketing analytics team at a multinational retailer wants to enrich its customer segmentation model with third-party demographic data purchased from a data broker. The broker's license grants 'internal analytical use' but explicitly prohibits 'use in customer-facing personalization.' The team plans to use the enriched segments to tailor promotional emails to individual customers. What should the data governance lead do first?

   • AReject the planned use and require the team to obtain a broader license or different data source before personalization.
   • BAllow the use but require the team to anonymize customer identities before applying the segments to emails.
   • CProceed with the plan but document the license terms in the data lineage for audit purposes.
   • DApprove the use because internal model training is an analytical use covered by the license.
   Reveal Solution Discussion Select an answer first