1. Data Access Models advanced

    A data platform carries four years of accumulated standing grants: about 900 analysts in roughly 300 groups with permanent read on 6,000 tables. Legal now requires that purpose be recorded and access be time-boxed. You cannot stop analysts working for a day. Give the sequence.

    3 min answer access controljust-in-time accesspurpose limitationaudit
  2. Data Access Models advanced Multiple choice

    A file collaboration platform must decide how to model data access across personal files, shared folders, team spaces and external sharing. Which model fits?

    1 min answer authorisationrebacsharinggraph
  3. Data Access Models beginner Multiple choice

    A team masks national identity numbers inside each BI tool's data model so analysts see only the last four digits. Security asks them to move the masking into the warehouse instead. Why does the location of the rule matter more than the rule itself?

    2 min answer maskingaccess controlpolicy enforcementbi tools
  4. Data Access Models beginner

    An analyst can query the customer table. A regulator asks whether she was allowed to use it for the marketing model she built. Role-based access answers one of those questions and not the other. What is the difference between role-, attribute- and purpose-based access, and what does purpose add?

    2 min answer rbacabacpurpose-limitationaccess-control
  5. Data Access Models advanced

    Review this emergency data access design. A shared role called prod_break_glass grants read on every production table. Any team lead can approve a request in a chat channel. The grant has no expiry and is removed when someone remembers. Every use writes a row to an audit table in the same warehouse. It was used 140 times last year. What would you remove, what would you change, and what would you leave alone?

    3 min answer access-controlbreak-glassauditexpiry