DA Data Ethics and Governance 2

Question 1

Which technique replaces sensitive data with a non-sensitive placeholder that cannot be reversed without a lookup key?

Accepted Answer

Tokenization

Answer

Encryption

Answer

Anonymization

Answer

Masking

Question 2

A company shares customer data with a third-party vendor for analysis. Which data governance control is most critical to establish first?

Accepted Answer

A data sharing agreement or DPA

Answer

Row-level security in the database

Answer

Data deduplication procedures

Answer

An ETL pipeline for the transfer

Question 3

What does 'data minimization' mean in the context of privacy regulations?

Accepted Answer

Collecting only the data necessary for the specified purpose

Answer

Compressing data to reduce storage costs

Answer

Reducing the number of data sources in a pipeline

Answer

Aggregating data to remove row-level details

Question 4

Which of the following is an example of implicit bias in a dataset?

Accepted Answer

A training dataset that underrepresents women in leadership roles

Answer

Missing values in a timestamp column

Answer

Duplicate records caused by a data entry error

Answer

Inconsistent date formats across data sources

Question 5

What is the difference between data anonymization and data pseudonymization?

Accepted Answer

Pseudonymization replaces identifiers with codes that can be re-linked; anonymization is irreversible

Answer

Anonymization is reversible; pseudonymization is not

Answer

They are identical processes with different names

Answer

Pseudonymization applies only to financial data; anonymization applies to health data

Question 6

A data analyst wants to publish aggregate statistics from a dataset. Which attack should they be most concerned about?

Accepted Answer

Re-identification through auxiliary data

Answer

SQL injection

Answer

Cross-site scripting

Answer

Man-in-the-middle attack

Question 7

In data ethics, what does the concept of 'informed consent' require?

Accepted Answer

Individuals must clearly understand and voluntarily agree to how their data will be used before collection

Answer

Individuals must be notified after their data is collected

Answer

Organizations must publish their data usage policies annually

Answer

Data must be encrypted before subjects consent to its collection