Which of the following is a responsibility of a data steward?
Correct Answer: D
A data steward is responsible for managing and overseeing the organization's data assets, ensuring the data is accurate, accessible, secure, and used effectively. One of the key responsibilities of a data steward is to ensure that data decisions and impacts are communicated to the organization. This includes helping stakeholders understand the importance of data quality, the implications of data decisions, and how changes in data management affect the organization. Data stewards serve as a bridge between data users, business units, and IT teams, ensuring that the organization's data-related policies, guidelines, and decisions are clearly communicated and understood.
Question 167
At a MINIMUM, audits of permissions to individual or group accounts should be scheduled
Correct Answer: D
Question 168
Which Orange book security rating introduces security labels?
Correct Answer: B
B1 is also called "Labeled Security" and each data object must have a classification label and each subject a clearence label. On each access attempt, the classification and clearence are checked to verify that the access is permissable. C2 is incorrect. C2 is also called "Controlled Access Protection" and only requires that subjects be individually identified and that security-related events are auditable. B2 is incorrect. B2 is also called "Structured Protection" and imposes additional controls on security policy and a more thorough review of system design and implementation. B3 is incorrect. B3 is also called "Security Domains" and and imposes more granularity in each protection mechanism. References: CBK, pp. 329 - 330 AIO3 pp.302 - 307
Question 169
A refinement to the basic Waterfall Model that states that software should be developed in increments of functional capability is called:
Correct Answer: B
The advantages of incremental development include the ease of testing increments of functional capability and the opportunity to incorporate user experience into a successively refined product. The other answers are distracters.
Question 170
Which of the following is not an element of a relational database model?
Correct Answer: D
The Three Parts of the Relational Model The relational model can be considered as having three parts and these are covered in sequence below: 1. Structural: defines the core of the data and the relationships involved. The model structure is described in terms of relations , tuples , attributes and domains . 2. Manipulative: defines how the data in the model will be accessed and manipulated. This concerns how relations in the model will be manipulated to produce other relations, which in turn provide the answer to some question posed by a user of the data. The manipulation is achieved though relational algebra or relational calculus . 3. Constraints: defines limits on the model. The constraints determine valid ranges and values of data to be included in the model. Reference used for this question: http://www.diranieh.com/Database/RelationalDatabaseModel.htm#Relational%20Model:%2 0Data%20Manipulation and www.macs.hw.ac.uk/~trinder/DbInfSystems/l4RelModel2up.pdf and KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 44.