Practice Test GeeksCDO - Chief Data Officer Certification Practice Test
← All CDO Flashcard Decks

Security & Access Control Flashcards

7 cards from real CDO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Access Control flashcards as text

  1. A CDO wants access decisions to factor in user department, data sensitivity label, and time of day. Which access control model best fits?

    Answer: Attribute-based access control (ABAC)

    ABAC evaluates policies against multiple attributes of the user, resource, and environment, such as time of day.

  2. Which practice most directly enforces separation of duties in a data pipeline?

    Answer: Requiring the developer who writes a transformation to be different from the person who approves its production deployment

    Separation of duties splits critical tasks so that no single person can both make and approve a change.

  3. Analysts need to see customer records in a test environment, but real Social Security numbers must never appear there. Which technique is most appropriate?

    Answer: Static data masking

    Static data masking permanently replaces sensitive values in non-production copies while keeping the format realistic.

  4. Under a zero trust architecture, which statement is TRUE?

    Answer: Every access request is authenticated, authorized, and continuously validated regardless of network location

    Zero trust follows 'never trust, always verify' and drops implicit trust based on network location.

  5. What is the main purpose of a periodic access recertification (entitlement review)?

    Answer: To confirm that each user's current access is still appropriate and remove excess privileges

    Recertification has data or system owners attest that access is still needed, which reduces privilege creep.

  6. Which control most directly lowers the risk that a stolen administrator password gives an attacker access to the data warehouse?

    Answer: Multi-factor authentication

    MFA requires an extra factor beyond the password, so a stolen credential alone is not enough.

  7. A company uses tokenization for payment card numbers. What is the key benefit compared with storing encrypted card numbers in every application?

    Answer: Systems that store only tokens can be removed from much of PCI DSS scope

    Tokens have no exploitable mathematical link to the card number, so systems holding only tokens can shrink PCI DSS compliance scope.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy