Examkin

Soru

Zorluk: ZorData Governance, Classification, and Privacy Controls

An enterprise organization is updating its data governance framework prior to launching a global customer analytics project. The Chief Risk Officer must formally segregate duties between executive business leads and technical operations staff. Which of the following duties are primary responsibilities of the Data Owner rather than the Data Custodian? (Select TWO.)

  1. Determining data classification levels and approving user access authorization permissionsCevap
  2. Defining data retention policy requirements and legal compliance purpose limitationsCevap
  3. C
    Implementing database storage encryption mechanisms and executing routinely scheduled server backups
  4. D
    Configuring central identity directory single sign-on rules to verify user authentication claims

Cevap

Determining data classification levels, approving access rights, establishing retention requirements, and defining legal business purpose limitations are the direct responsibilities of the Data Owner. Technical safeguards, such as implementing storage encryption, executing backups, and configuring authentication mechanisms, are carried out by Data Custodians and system administrators.
Data Owners hold ultimate business accountability for data assets. Their duties include establishing sensitivity classification schemas, approving authorization requests, defining retention windows based on business or legal needs, and enforcing usage policy bounds. In contrast, Data Custodians handle technical execution such as implementing backup schedules, managing database storage controls, and maintaining infrastructure.

Adım Adım Çözüm

1
Analyze the core responsibilities of a Data Owner
Identify that Data Owners represent business leadership and are accountable for data classification, access governance, policy enforcement, retention criteria, and regulatory compliance.
Business data owners have organizational authority over data usage and regulatory adherence.
2
Analyze the core responsibilities of a Data Custodian
Identify that Data Custodians are technical personnel responsible for implementing and maintaining technical controls, backup operations, storage encryption, and daily maintenance mandated by Data Owners.
Custodians manage the operational structure and technical safeguards without deciding business policy.
3
Distinguish business ownership tasks from technical execution tasks
Classification tag determination, access authorization approval, retention rule setting, and business purpose definition belong to the Data Owner, while technical database configuration and identity integration belong to technical roles.
Clear segregation of duties prevents business decisions from being delegated to system administrators.

Anahtar Kavram

Data Owner vs. Data Custodian Responsibilities
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Data Governance, Classification, and Privacy Controls

Bu konudan daha fazla soru