WGU Comptia Data+ D492 Part 4 Latest updated version with accurate solutions 2026

_________ is the process of removing obvious identifiers

deidentification

which 3 pieces of data when used together can become a unique identifier

zip code

date of birth

gender

________ removes the possibility of identification

anonymization

data _______ transforms personally identifying information into a form where it is no longer possible to tie it to an individual person

data obfuscation

________ replaces sensitive fields with hash values

hashing

_____ _____ attacks compare hash values with precomputed hashes

rainbow table attacks

________ replaces sensitive fields with a random identifier

tokenization

______ redacts sensitive information from a file

masking

you should ______ the data before transferring data to apply security controls

classify

use the _______ ________ _____ to define roles, access, and responsibilities

data sharing agreements

apply Encryption, access controls and _____ _____ during transfers

audit logs

follow data ______ by sharing only what's necessary

data minimization

data _____ means using data in fair, responsible, and trustworthy ways

data ethics

check for _____ in data and algorithms

bias

you must obtain clear and informed _____ for data processing

consent

ethical data requires data ______ ensuring that the organizations take responsibility for what happens to the data

accountability

________ protects information and systems from unauthorized access

confidentiality

_______ attacks seek to undermine confidentiality

disclosure

_______ protects information and systems from unauthorized modification

integrity

_______ attacks seek to undermine integrity

alteration attacks

______ ensures that information and systems are available for authorized users when needed

availability

______ attacks seek to undermine availability

denial

________ controls restrict users from accessing sensitive information without permission

access

______ protects information from unauthorized access

encrpytion

encryption protects data _______

data is stored on local hard drive, on a shared file server or in a cloud service

data at rest

encryption protects data _________

data transmitted over a wired or wireless network

data in transit

________ hides data inside of images or other files

steganography

authorized users should only gain _____ to data through the process of identification, authentication and authorization

access

_______ tracks user activity

accounting

______ is when you make a claim of who you are

this is commonly a username

identification

_____ is when you show proof of who you are

an ID or a password that only that person should know

authentication

______ is what checks to see if you are allow to see the resource you are trying to access

authorization

data life cycle

when the organization ____ new data either in the cloud or in an on premise system

creates

data life cycle

data s moved into ____ for retention and later use

storage

data life cycle

data is _______ by individuals and systems

used

data life cycle

data is ______ with other employees customers and partners

shared

data life cycle

data is moved from active storage to an ______

archive

data is _______ _______ when it is no longer needed

securely destroyed

data destruction is essential to __________ reproduction

preventing

data sanitization

______ overwrites sensitive information to frustrate casual analysis

clearing

data sanitization

______ uses more advanced techniques to frustrate lab analysis

purging

_______ completely obliterates the media thru shredding, pulverizing, melting, or burning

destroying

you should use the _____ flowchart when choosing the method of sanitizing data

NIST

paper record destruction

when shredding you use use what type of shredder

cross cut

paper record destruction

____ is when you remove all the ink from a paper

pulping

paper record destruction

_______ is when you burn a paper

burning

data doesn't always follow the data ______ in order

life cycle

________ is assigned classifications based on

sensitivity

criticallity

data

_______ requirements make it easy to determine the classification of information

labeling

___________ is a business focused control framework covering IT and related tech

control objectives for IT

COBIT

ISO standards

ISO ______ covers cyber control objectives

ISO 27001

ISO standards

ISO ______ covers cyber control implementation

ISO 27002

ISO standards

ISO ______ covers privacy controls

ISO 27701

ISO standards

ISO ______ covers risk management

ISO 31000

NIST ______ is mandatory for federal agencies

NIST 800-53

NIST provides a ____ _______ which goals is to

- provide a common language for cyber security risks

- helps identify and prioritize actions

- aligns security actions across control types

- offers different value to different organizations

NIST cybersecurity framework

NIST provides a _____ _____ framework

- covered in NIST SP 800-37

- flexible and adaptable

- integrates security and privacy

- treats risk management as an ongoing process

risk management framework RMF

___________ program certifies providers for US federal government use

federal risk and authorization program

FEDRAMP

_______________ is a framework designed for managing security architectures and aligns strategy with business goals as well as incorporating risk management

sherwood applied business security architecture

SABSA

_____ and assessments verify that security controls are functioning properly

audits

assessments are usually requested ____

internally

audits are often imposed by ______ requirements

audits

audits follow a formal ____ and use planned tests

standard

_______ auditors work for the org but report independently

they are inside the org control

internal

______ auditors are independent firms that perform audits requested by the board

they are outside of the org control

external

______ auditors are agencies or industry groups that perform regulatory audits

they are outside of the enterprise control

third party

all audits should have a clearly defined ____

scope

User _____ reviews validate rights and permissions

access

a ______ analysis provide a roadmap for future work

gap analysis

an ______ confirms that controls are adequate and functioning properly to meet control objectives

attestation

______ _____ ______ covers business processes and technical solutions aimed at creating and maintaining a single source of truth for critical business data

the purpose of this is to

- improve data consistency

- streamline data access

- completing mergers and acquisitions

- compliance with policies and regulation

master data management

MDM

data ______ provide clear descriptions of terms

data definitions

a data _____ is a compilation of all your data definitions

data dictionary

data quality dimensions

data _____ ensures that data correctly reflects the reality of the situation

accuracy

data quality dimensions

data ______ requires that we have all of the relevant data for a field stored in our master data store

completeness

data ______ guarantees data stored in multiple locations is the same

consistency

data quality dimensions

data ______ ensures that data stored in our master data stores is current

timeliness

data quality dimensions

data _____ requires that data meets our requirements and attribute limitations

validity

data quality dimensions

data ______ ensures that we only have one record foreach entity or event represented in a dataset

uniqueness

______ testing check individual functions or scripts for correct behavior

unit testing

_____ testing confirms the system meets business and technical needs

requirements testing

_____ testing evaluates system performance under extreme load

stress testing

user _____ testing ensures the system meets expectations of end users

user acceptance testing

_____ ______ tracks changes to code configurations and data processes

source control

_____ _____ allows teams to trace revert and recover from mistakes

version history

tools like _____ support collaboration and structured workflows

git

source control improved _____ and supports compliance with regulated data

auditability