View Full CompTIA DataSys+ DS0-001 Exam Dumps and Practice Test Dumps

 

Question 201.

A database administrator needs to migrate a large database to a new server with minimal downtime. Which approach is MOST appropriate?

1. Use replication, log shipping, or another synchronization method before final cutover
2. Shut down the source for several days without planning
3. Copy only selected random files
4. Recreate the database manually from reports

Correct Answer: 1. Use replication, log shipping, or another synchronization method before final cutover

Explanation:

A synchronization mechanism can keep the destination close to current while the migration is prepared. At cutover, the administrator applies the final changes, validates the destination, and redirects applications with much less downtime than a full offline copy. The exact method depends on platform capabilities, database size, recovery requirements, and network capacity. A rollback plan and validation steps should also be prepared.

Question 202.

Which activity is MOST important immediately after a database migration?

1. Delete the source database immediately
2. Validate data integrity, application connectivity, security, and performance
3. Disable all monitoring
4. Remove backups of the old environment

Correct Answer: 2. Validate data integrity, application connectivity, security, and performance

Explanation:

A successful copy does not automatically mean the migrated system is production-ready. Administrators should verify row counts or checksums where appropriate, application connectivity, permissions, jobs, integrations, backups, and performance. Monitoring should remain active so unexpected behavior can be detected quickly. The source environment should usually be retained until the migration is formally accepted and rollback risk has passed.

Question 203.

A database administrator wants to compare source and destination data after migration. Which technique is MOST useful?

1. Rename both databases
2. Compare only file sizes
3. Use row counts, checksums, and targeted validation queries
4. Review password age

Correct Answer: 3. Use row counts, checksums, and targeted validation queries

Explanation:

Migration validation should provide evidence that the data transferred correctly. Row counts, checksums, reconciliation queries, and business-level spot checks can detect missing or altered records. File size alone is not sufficient because storage layout, compression, and indexes can differ between environments. Validation should focus on both structural and business-critical data integrity.

Question 204.

A database is being retired permanently. Which action should occur BEFORE the system is decommissioned?

1. Delete all documentation
2. Remove every backup immediately
3. Leave service accounts active indefinitely
4. Confirm retention, archival, legal, recovery, and secure-disposal requirements**

Correct Answer: 4. Confirm retention, archival, legal, recovery, and secure-disposal requirements

Explanation:

Database retirement should be governed by business, legal, security, and data-retention requirements. Data may need to be archived before the live system is removed, while credentials, integrations, and infrastructure should be decommissioned securely. Required historical information must remain accessible for the defined retention period, and unnecessary copies should eventually be disposed of using approved methods.

Question 205.

Which process BEST ensures that database administrators know who owns a particular database and who approves changes to it?

1. Configuration and asset management
2. Index rebuilding
3. Query caching
4. Data compression

Correct Answer: 1. Configuration and asset management

Explanation:

Configuration and asset management records key information about database systems, including ownership, environment, versions, dependencies, and support responsibility. Clear ownership helps ensure changes are approved by the right stakeholders and incidents are routed correctly. Accurate inventory data is also valuable for patching, audits, disaster recovery, and lifecycle planning.

Question 206.

A database inventory does not identify which systems contain regulated personal data. What is the PRIMARY risk?

1. Queries will always be slower
2. Security and compliance controls may not be applied appropriately
3. Indexes will become fragmented
4. Transactions cannot be committed

Correct Answer: 2. Security and compliance controls may not be applied appropriately

Explanation:

Data classification helps organizations determine which systems require stronger access controls, encryption, auditing, retention, and monitoring. If administrators do not know where regulated or sensitive information is stored, required protections may be missing. Accurate inventories and data classification therefore support both security and compliance throughout the database lifecycle.

Question 207.

Which concept BEST describes labeling data as Public, Internal, Confidential, or Restricted based on sensitivity?

1. Replication
2. Normalization
3. Data classification
4. Partitioning

Correct Answer: 3. Data classification

Explanation:

Data classification categorizes information according to sensitivity, business value, or regulatory requirements. Classification helps determine appropriate controls for access, encryption, logging, sharing, retention, and disposal. Labels should be supported by organizational policy so administrators and users understand what protections apply to each category.

Question 208.

A database administrator needs to restrict access to certain rows based on the logged-in user’s region. Which capability is MOST directly relevant?

1. Full backup
2. Index compression
3. RAID
4. Row-level security**

Correct Answer: 4. Row-level security

Explanation:

Row-level security can restrict which records a user or application is allowed to retrieve based on identity, role, region, tenant, or another policy condition. This enables multiple users to access the same table while seeing different subsets of data. The exact implementation varies by platform and should be tested carefully to ensure policies cannot be bypassed.

Question 209.

Which database security capability can hide portions of sensitive values from users who do not need to see the complete data?

1. Dynamic data masking
2. Table partitioning
3. Replication
4. Deadlock detection

Correct Answer: 1. Dynamic data masking

Explanation:

Dynamic data masking can display an obscured representation of sensitive values to selected users while preserving the underlying data. For example, only part of an account number might be shown. Masking can reduce casual exposure, but it should not replace strong access controls or encryption because privileged users or certain query paths may still access original values depending on implementation.

Question 210.

A company wants a database administrator to receive temporary elevated permissions only while performing an approved maintenance task. Which approach is BEST?

1. Permanent database-owner membership
2. Just-in-time privileged access
3. Shared administrator credentials
4. Anonymous access

Correct Answer: 2. Just-in-time privileged access

Explanation:

Just-in-time access grants elevated privileges only for a limited period and approved purpose. This reduces standing privilege and limits exposure if an administrator’s normal credentials are compromised. Privileged access systems may also require approval, record activity, and automatically revoke permissions after the maintenance window ends.

Question 211.

A database administrator discovers that several applications connect using the same shared service account. What is the BEST improvement?

1. Increase that account’s privileges
2. Disable all application logging
3. Assign separate service identities with permissions scoped to each application
4. Share the same password with more teams

Correct Answer: 3. Assign separate service identities with permissions scoped to each application

Explanation:

Separate service identities improve least privilege, accountability, and incident containment. If one application’s credentials are compromised, the attacker should not automatically gain access to unrelated application data. Individual identities also make auditing more useful because administrators can determine which application performed a database action.

Question 212.

A database administrator needs to ensure that service-account passwords are changed regularly without manually editing application configuration files. Which capability is MOST useful?

1. Table normalization
2. Query caching
3. Index maintenance
4. Automated secrets rotation**

Correct Answer: 4. Automated secrets rotation

Explanation:

Automated secrets rotation changes credentials through a managed process and updates authorized consumers without requiring developers or administrators to edit plaintext configuration manually. This reduces long-lived credential exposure and operational errors. The application and database must support coordinated rotation so old credentials are retired without causing service outages.

Question 213.

Which practice BEST supports recovery if a database encryption key is accidentally lost?

1. Maintain protected, tested backup copies of required keys according to key-management policy
2. Store the only key on one administrator’s laptop
3. Email keys to the entire operations team
4. Disable encryption before backups

Correct Answer: 1. Maintain protected, tested backup copies of required keys according to key-management policy

Explanation:

If encrypted data cannot be decrypted because its key is lost, backups may be unusable. Key-management procedures should therefore include secure backup or escrow of keys when required, with strong access controls and recovery testing. Key copies must remain protected because unauthorized access to them can defeat the confidentiality provided by encryption.

Question 214.

Which security control BEST helps detect unauthorized changes to database configuration files?

1. Larger buffer cache
2. File integrity monitoring
3. Data compression
4. Query pagination

Correct Answer: 2. File integrity monitoring

Explanation:

File integrity monitoring detects unexpected modifications to protected configuration files, binaries, or other critical system components. Changes can then be compared against approved maintenance activity. This supports detection of unauthorized tampering and complements database auditing, operating-system logging, access controls, and change management.

Question 215.

A database administrator wants to limit direct database connections so only application servers can reach the database port. Which control is MOST appropriate?

1. Full database backup
2. Data masking
3. Network firewall or security-group rules
4. Index rebuild

Correct Answer: 3. Network firewall or security-group rules

Explanation:

Network controls can restrict database traffic to approved application servers, administration networks, or other authorized sources. This reduces exposure and prevents arbitrary systems from attempting direct connections. Network restrictions should be combined with authentication, TLS, least privilege, and monitoring because network location alone should not be treated as sufficient authorization.

Question 216.

A company wants to ensure database traffic cannot be read by an attacker who captures network packets. Which control BEST addresses this risk?

1. Data normalization
2. Backup compression
3. Table partitioning
4. TLS encryption for database connections**

Correct Answer: 4. TLS encryption for database connections

Explanation:

TLS protects database traffic in transit by encrypting communication between clients and servers. Proper certificate validation is also important so clients can verify that they are connecting to the intended database service. Encryption at rest protects stored files, but it does not secure data while it travels across the network.

Question 217.

Which practice BEST supports database certificate management?

1. Monitor expiration dates and renew certificates before they expire
2. Ignore certificate expiration if encryption is enabled
3. Use expired certificates indefinitely
4. Share private keys publicly

Correct Answer: 1. Monitor expiration dates and renew certificates before they expire

Explanation:

Expired certificates can interrupt encrypted connectivity or encourage insecure workarounds. Administrators should inventory certificates, monitor expiration, automate renewal where possible, and protect private keys. Certificate changes should be tested so applications trust the new chain and can reconnect without unexpected outages.

Question 218.

A database server’s operating system is no longer supported by the vendor. What is the BEST long-term action?

1. Ignore the issue if the database still runs
2. Plan and execute migration to a supported platform
3. Disable security updates permanently
4. Expose the server only to the public internet

Correct Answer: 2. Plan and execute migration to a supported platform

Explanation:

Unsupported operating systems may stop receiving security fixes, compatibility updates, and vendor assistance. Continuing to operate critical databases on unsupported platforms increases operational and security risk. Administrators should plan a controlled migration, including compatibility testing, backups, rollback procedures, and application validation.

Question 219.

A database administrator receives notice of a critical database-engine vulnerability. What should be done FIRST?

1. Disable all backups
2. Ignore the notice until exploitation occurs
3. Assess exposure, affected versions, vendor guidance, and required remediation
4. Delete the database

Correct Answer: 3. Assess exposure, affected versions, vendor guidance, and required remediation

Explanation:

The administrator should determine whether the environment is affected, how exploitable the vulnerability is, and what vendor patches or mitigations are available. Remediation urgency should reflect risk and business impact. Testing, backups, rollback planning, and change management remain important, but they should not cause unnecessary delay for critical security fixes.

Question 220.

Which statement BEST describes effective database configuration management?

1. Configuration should be changed informally whenever needed
2. Only the database name needs documentation
3. Baselines are unnecessary when monitoring exists
4. Approved settings should be documented, versioned where practical, monitored for drift, and changed through controlled processes**

Correct Answer: 4. Approved settings should be documented, versioned where practical, monitored for drift, and changed through controlled processes

Explanation:

Configuration management establishes known, approved database settings and provides a way to identify unauthorized or accidental changes. Versioned configuration, baselines, automation, drift detection, and change records improve repeatability and troubleshooting. This is especially important across multiple environments where inconsistent settings can cause security, performance, or availability problems.