Check Data Privacy, Compliance, and Access PMI-CPMAI Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A financial services firm is audited by a regulator. The auditor asks for proof that a specific dataset used in a machine learning model was obtained under a valid license and that its handling complied with data protection regulations. The firm has no record of where the dataset originated or how it was processed. What is the most critical gap the firm must address?

   • AThe requirement to delete the dataset immediately to avoid further non-compliance.
   • BThe lack of documented data lineage showing the dataset's origin, license, and processing history.
   • CThe absence of a privacy impact assessment for the machine learning model.
   • DThe need to implement stronger access controls on the model's training data.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A hospital's data platform stores patient health records. The hospital wants to allow researchers to access de-identified data for studies, but only authorized clinicians should access identifiable records. What should the hospital implement?

   • AEncryption of all patient records to prevent unauthorized access.
   • BA single shared account for all researchers and clinicians to access the data.
   • CA data catalog that documents the lineage of patient records.
   • DRole-based access control (RBAC) with separate roles for researchers and clinicians, granting researchers access only to de-identified data.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of implementing user permissions on a data resource?

   • ATo reduce the storage cost of the data
   • BTo improve the performance of data queries
   • CTo make the data available to all team members
   • DTo restrict access to authorized individuals only
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare organization's data platform stores patient records in a shared data lake. Data scientists need read access to de-identified clinical data for research, but only specific compliance officers should see fully identifiable records. The organization uses Azure Active Directory (Azure AD) for identity. What should the data platform team implement?

   • AGrant all data scientists read access to the entire lake and rely on their training to avoid accessing identifiable fields.
   • BStore identifiable data in a separate on-premises database and give all users access to the cloud data lake.
   • CEncrypt the identifiable data with a key that only the data scientists know.
   • DCreate two Azure AD groups—'Researchers' and 'ComplianceOfficers'—and assign role-based access control (RBAC) permissions to lake folders containing de-identified and identifiable data respectively.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   A project uses a licensed dataset that permits only non-commercial research. The team plans to use the data to develop a paid service. What should the team do?

   • AObtain a different license or permission for commercial use
   • BUse the data but remove any identifying information
   • CIgnore the license because the data is publicly available
   • DProceed because the data is already licensed
   Reveal Solution Discussion Select an answer first