Examkin

Question

Difficulty: HardData Governance, Classification, and Privacy Controls

An automotive software enterprise is establishing privacy and governance controls for its connected vehicle telematics platform, which collects driver location history and telemetry data. The Chief Information Security Officer (CISO) designates the Fleet Analytics Product Manager as the Data Owner and the Lead Database Administrator as the Data Custodian. Which of the following operational tasks are the primary responsibility of the Data Custodian? (Select TWO.)

  1. Configuring role-based access control policies and implementing AES-256 storage encryption across database clusters hosting telemetry logsAnswer
  2. Executing routine database backup routines, patch management, and monitoring storage integrity metricsAnswer
  3. C
    Defining the overarching data classification schema and setting baseline sensitivity levels for new telemetry data fields
  4. D
    Approving formal access exceptions for external business partners requesting access to driver location datasets

Answer

Configuring access controls and storage encryption, along with executing routine database backups and maintenance, are technical tasks assigned to the Data Custodian.
The Data Custodian is responsible for the practical execution of security controls and operational maintenance of datasets. This includes applying technical controls like access policy configurations and storage encryption, as well as preserving data integrity and availability through routine backups and patching.

Step-by-Step Solution

1
Identify the distinct governance roles defined in the scenario context.
The Product Manager holds ultimate business accountability as Data Owner, while the Database Administrator manages operational safeguards as Data Custodian.
Distinguishing strategic business ownership from technical operational custody is necessary to evaluate task delegation.
2
Evaluate technical implementation tasks against Data Custodian duties.
Tasks enforcing security controls—such as database encryption, role-based access rules, backup execution, and patch management—belong to the Data Custodian.
The Data Custodian is responsible for hands-on technical protection, storage, and maintenance of dataset infrastructure.
3
Evaluate administrative authority tasks against Data Owner duties to identify distractors.
Defining data classification levels and authorizing third-party data sharing permissions are business decision-making duties belonging to the Data Owner.
Data Owners determine data value, assign sensitivity labels, and decide who may access organizational data assets.

Key Concept

Data Owner vs. Data Custodian Responsibilities
Estimated Time:2m 0s
Rate this question

Topics

Data Governance, Classification, and Privacy Controls

More questions from this topic