Practice Test GeeksCDO - Chief Data Officer Certification Practice Test
← All CDO Flashcard Decks

System Architecture & Design Flashcards

7 cards from real CDO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 System Architecture & Design flashcards as text

  1. Which security architecture principle assumes no user, device, or network segment is trusted by default and checks every access request?

    Answer: Zero trust

    Zero trust follows 'never trust, always verify' and authenticates and authorizes every request no matter where it comes from.

  2. An analytics platform must let analysts join on credit card numbers without ever exposing the real values. Which technique fits best?

    Answer: Tokenization

    Tokenization replaces sensitive values with consistent surrogate tokens that can be joined but are useless outside the token vault.

  3. Which access control model grants permissions by evaluating attributes of the user, the resource, and the environment, such as department, data classification, and time of day?

    Answer: ABAC

    Attribute-Based Access Control evaluates policies on several attributes, which allows finer-grained decisions than roles alone.

  4. A regulation requires that EU citizens' personal data stay physically stored within the EU. Which architecture requirement does this create?

    Answer: Data residency

    Data residency requirements limit the geographic locations where data may be stored and processed.

  5. Which practice best follows 'privacy by design' when building a new customer data platform?

    Answer: Applying data minimization and default protections from the initial design

    Privacy by design builds minimization and protective defaults into systems from the start, not as an afterthought.

  6. What is the main architectural benefit of envelope encryption with a centralized key management service (KMS)?

    Answer: Data keys are protected by master keys that can be rotated and audited centrally

    Envelope encryption encrypts data keys with a KMS-held master key, which allows central rotation, access control, and auditing.

  7. Which component is typically placed in front of data APIs to centralize authentication, rate limiting, and request routing?

    Answer: API gateway

    An API gateway is the single entry point that enforces cross-cutting policies such as authentication and throttling.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy