Soru

Zorluk: OrtaData Governance, Classification, and Privacy Controls

A smart home technology platform is updating its data governance framework to comply with international privacy regulations regarding customer telemetry and voice interaction logs stored in cloud repositories. Which of the following actions correctly align with standard data governance roles and privacy control implementations? (Select TWO.)

  1. The business unit leader functioning as the data owner defines data classification levels and determines access requirements based on organizational risk.Cevap
  2. B
    The database administrator functioning as the data custodian determines data sensitivity labels and grants final access authorization for users.
  3. C
    Implementing pseudonymization to replace direct identifiers with artificial tokens, allowing data to be re-identified when combined with a separately secured mapping key.
  4. D
    Applying data masking to guarantee permanent anonymization so that individual subjects can never be re-identified under any circumstances.

Cevap

The correct statements are that the business unit leader functioning as the data owner defines classification levels and determines access requirements, and that pseudonymization replaces direct identifiers with tokens while preserving the capability to re-identify data using a separate secure key.
Data owners are business executives responsible for defining data sensitivity classifications and determining who receives access to data assets under their purview. Additionally, pseudonymization is a privacy technique that substitutes identity fields with pseudonyms or tokens while storing mapping keys separately, allowing legitimate re-identification under controlled privacy conditions.

Adım Adım Çözüm

1
Analyze data governance roles (Owner vs. Custodian).
Identify that the business data owner establishes data classification and access policy, while the data custodian enforces operational controls and technical administration.
Clear segregation between strategic data ownership and technical data custody ensures proper oversight and risk management.
2
Evaluate privacy-enhancing technology definitions (Pseudonymization vs. Masking/Anonymization).
Verify that pseudonymization allows reversible linking using a distinct key, whereas masking is an obfuscation control that does not equate to full mathematical anonymization.
Understanding the technical distinctions between data protection mechanisms is necessary to meet specific privacy regulation standards.

Anahtar Kavram

Data Governance Roles and Privacy-Enhancing Technologies
Bu soruyu puanla