Practice Test GeeksCDO - Chief Data Officer Certification Practice Test
← All CDO Flashcard Decks

Security & Access Control Flashcards

7 cards from real CDO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Access Control flashcards as text

  1. Which audit report is commonly requested from a SaaS vendor to show the operating effectiveness of its security controls over a period of time?

    Answer: SOC 2 Type II

    A SOC 2 Type II report tests the operating effectiveness of controls under the Trust Services Criteria over a period of time.

  2. A shadow IT team uploads customer data to an unsanctioned cloud app. Which tool is designed to discover and control this activity?

    Answer: Cloud Access Security Broker (CASB)

    A CASB sits between users and cloud services to discover unsanctioned apps and enforce data security policies.

  3. What is the main reason to classify data (for example Public, Internal, Confidential, Restricted) before defining access controls?

    Answer: It lets controls scale with data sensitivity, so protection matches risk

    Classification lets the organization apply controls in proportion to how sensitive each data asset is.

  4. Which practice best protects data in transit between an application and a cloud database?

    Answer: TLS 1.2 or higher with certificate validation

    TLS encrypts and authenticates network connections, protecting data while it moves between systems.

  5. OAuth 2.0 is primarily designed for:

    Answer: Delegated authorization, letting an application access resources on a user's behalf without sharing the user's password

    OAuth 2.0 is an authorization framework that issues scoped access tokens, and OpenID Connect adds authentication on top of it.

  6. A role-mining exercise finds that 40% of users hold permissions they have never used in 12 months. What is the best CDO-level response?

    Answer: Remove or right-size unused entitlements in line with least privilege

    Removing unused entitlements shrinks the attack surface and enforces least privilege.

  7. Which statement about encryption key rotation is MOST accurate?

    Answer: Regular rotation limits how much data is exposed if a single key is compromised

    Rotating keys periodically reduces the amount of data protected by any single key and limits the impact of a compromise.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy