Practice Test GeeksDA - Data Analyst Practice Test
← All DA Flashcard Decks

Data Ethics and Governance Flashcards

7 cards from real DA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Data Ethics and Governance flashcards as text

  1. Which technique replaces sensitive data with a non-sensitive placeholder that cannot be reversed without a lookup key?

    Answer: Tokenization

    Tokenization substitutes sensitive data with a randomly generated token; the original value can only be retrieved via a secure token vault.

  2. A company shares customer data with a third-party vendor for analysis. Which data governance control is most critical to establish first?

    Answer: A data sharing agreement or DPA

    A Data Processing Agreement (DPA) or data sharing agreement legally defines how the third party may use, protect, and dispose of the data.

  3. What does 'data minimization' mean in the context of privacy regulations?

    Answer: Collecting only the data necessary for the specified purpose

    Data minimization is a GDPR principle requiring organizations to collect and retain only the data that is strictly necessary for a defined purpose.

  4. Which of the following is an example of implicit bias in a dataset?

    Answer: A training dataset that underrepresents women in leadership roles

    Implicit bias occurs when historical patterns or systemic inequalities are reflected in the data, causing models trained on it to perpetuate those patterns.

  5. What is the difference between data anonymization and data pseudonymization?

    Answer: Pseudonymization replaces identifiers with codes that can be re-linked; anonymization is irreversible

    Pseudonymization replaces direct identifiers with pseudonyms but keeps a key that allows re-identification, while anonymization irreversibly removes all identifying information.

  6. A data analyst wants to publish aggregate statistics from a dataset. Which attack should they be most concerned about?

    Answer: Re-identification through auxiliary data

    Re-identification attacks use external auxiliary data to link aggregate statistics back to individuals, compromising anonymization.

  7. In data ethics, what does the concept of 'informed consent' require?

    Answer: Individuals must clearly understand and voluntarily agree to how their data will be used before collection

    Informed consent requires that individuals are given clear, understandable information about data usage and voluntarily agree before their data is collected.