CDO System Architecture & Design 4

Question 1

Which security architecture principle assumes no user, device, or network segment is trusted by default and checks every access request?

Accepted Answer

Zero trust

Answer

Zero trust follows 'never trust, always verify' and authenticates and authorizes every request no matter where it comes from.

Question 2

An analytics platform must let analysts join on credit card numbers without ever exposing the real values. Which technique fits best?

Accepted Answer

Tokenization

Answer

Tokenization replaces sensitive values with consistent surrogate tokens that can be joined but are useless outside the token vault.

Question 3

Which access control model grants permissions by evaluating attributes of the user, the resource, and the environment, such as department, data classification, and time of day?

Accepted Answer

ABAC

Answer

Attribute-Based Access Control evaluates policies on several attributes, which allows finer-grained decisions than roles alone.

Question 4

A regulation requires that EU citizens' personal data stay physically stored within the EU. Which architecture requirement does this create?

Accepted Answer

Data residency

Answer

Data residency requirements limit the geographic locations where data may be stored and processed.

Question 5

Which practice best follows 'privacy by design' when building a new customer data platform?

Accepted Answer

Applying data minimization and default protections from the initial design

Answer

Privacy by design builds minimization and protective defaults into systems from the start, not as an afterthought.

CDO - Chief Data Officer Certification Practice Test

CDO - Chief Data Officer Certification Practice Test

CDO System Architecture & Design 4