CDS Security & Access Management 3

Question 1

Which technique involves replacing sensitive data elements with a non-sensitive substitute that maintains a consistent reference, allowing data to be tracked across systems without exposing the original value?

Accepted Answer

Tokenization

Answer

Tokenization replaces sensitive data with a token (surrogate value) that can be mapped back to the original in a secure token vault, unlike encryption it cannot be reversed without vault access.

Question 2

An organization wants to ensure that access to its most sensitive data requires both a password and a physical security key. Which security control does this represent?

Accepted Answer

Multi-factor authentication (MFA)

Answer

MFA requires two or more verification factors from different categories (knowledge, possession, inherence), making unauthorized access significantly harder.

Question 3

When a data steward reviews a request to give an analyst read access to a production customer table, what is the FIRST question they should ask?

Accepted Answer

What is the business justification for this access?

Answer

The business justification establishes whether the access request aligns with need-to-know principles before any technical provisioning is considered.

Question 4

What is a 'data classification scheme' primarily used for in security and access management?

Accepted Answer

Categorizing data by sensitivity level to determine appropriate security controls

Answer

Data classification assigns sensitivity labels (e.g., Public, Internal, Confidential, Restricted) that drive which security controls, access restrictions, and handling procedures apply.

Question 5

A company's data steward notices that database administrators have full read access to all HR salary data, though their role requires only system maintenance. What principle is being violated?

Accepted Answer

Least privilege

Answer

The principle of least privilege states that users should have only the minimum access rights needed to perform their job functions — nothing more.

(CDS) Certified Data Steward Practice Test

(CDS) Certified Data Steward Practice Test

CDS Security & Access Management 3