CDS Security & Access Management 2

Question 1

Which access control model assigns permissions based on a user's job function within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants access rights based on roles assigned to users according to their organizational function, simplifying permission management.

Question 2

A data steward discovers that a former employee's account still has active access to sensitive data repositories three months after termination. This is an example of failure in which process?

Accepted Answer

Access recertification

Answer

Access recertification (periodic review and validation of user access rights) should have detected and removed the terminated employee's access.

Question 3

What is the primary purpose of data masking in a security context?

Accepted Answer

Replacing sensitive data with realistic but fictitious values for non-production use

Answer

Data masking substitutes real sensitive data with structurally similar but non-sensitive values, allowing development and testing without exposing real PII.

Question 4

Under the principle of separation of duties, which scenario represents a control violation?

Accepted Answer

The same employee both approves data access requests and provisions those access rights

Answer

Separation of duties requires that no single individual can both authorize and implement a sensitive action, preventing fraud and errors.

Question 5

Which encryption approach is most appropriate for protecting data stored in a database at rest?

Accepted Answer

Transparent Data Encryption (TDE)

Answer

TDE encrypts database files on disk transparently, protecting data at rest without requiring application-level changes.

(CDS) Certified Data Steward Practice Test

(CDS) Certified Data Steward Practice Test

CDS Security & Access Management 2