CPA Quiz: Evaluate Data Governance Structures
20 questions · exam conditions
0:00
Evaluate Data Governance StructuresQuestion 1 of 20

Which of the following scenarios most clearly demonstrates the need for a data governance framework?

A company upgrades its database hardware to improve query performance.
A company encrypts all sensitive data to comply with privacy regulations.
A company's three business divisions produce conflicting customer count figures because each uses a different definition of 'customer,' creating confusion in board-level reporting.
A company implements multi-factor authentication for database access.
← Back to quizzes

CPA Quiz

CPA Quiz: Evaluate Data Governance Structures

Practice Evaluate Data Governance Structures in CPA with focused quiz questions that help you check what you know, review explanations, and build confidence with test-style prompts.

What this quiz covers

This quiz focuses on Evaluate Data Governance Structures, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

All questions

Question 1

Which of the following scenarios most clearly demonstrates the need for a data governance framework?

  1. A company upgrades its database hardware to improve query performance.
  2. A company encrypts all sensitive data to comply with privacy regulations.
  3. A company's three business divisions produce conflicting customer count figures because each uses a different definition of 'customer,' creating confusion in board-level reporting. (correct answer)
  4. A company implements multi-factor authentication for database access.
Explanation: Conflicting data definitions producing inconsistent reports across divisions is the classic symptom that data governance is needed - inconsistent standards, no data ownership accountability, and no authoritative definitions. Answer C is correct. Hardware upgrades (A), encryption (B), and authentication (D) are technical IT management activities that do not require governance frameworks.

Question 2

In a data governance framework, the 'data owner' role is primarily responsible for:

  1. Physically storing and maintaining the databases that contain the data.
  2. Writing queries and generating reports from the data.
  3. Defining data access policies, approving access requests, ensuring data quality, and being accountable for the data's appropriate use within their business domain. (correct answer)
  4. Auditing data quality and reporting findings to the board.
Explanation: The data owner is a business accountability role - typically a senior business leader responsible for a data domain who approves access, sets quality standards, and is accountable for how data is used. Answer C is correct. Physical storage and maintenance (A) is the data custodian role. Report writing (B) is a data consumer function. Auditing (D) is the internal audit function's role.

Question 3

A financial institution discovers that the same customer has five different records across its CRM, loan origination, and core banking systems with inconsistent addresses and account information. This problem is best addressed through:

  1. Encrypting all customer records to prevent further data corruption.
  2. Deleting duplicate records without investigation.
  3. Restricting access to customer data to senior staff only.
  4. A master data management (MDM) initiative that establishes a single authoritative customer record (golden record) synchronized across all systems. (correct answer)
Explanation: MDM creates a single trusted version of key data entities (customers, products) that all systems reference, eliminating the inconsistencies caused by siloed data. Answer D is correct. Encryption (A) protects confidentiality but does not fix data quality. Deleting duplicates without investigation (B) risks losing valid data. Access restriction (C) does not resolve inconsistency.

Question 4

An organization's data governance framework includes a data quality scorecard that measures accuracy, completeness, and timeliness for each major data domain. The primary purpose of this scorecard is to:

  1. Provide ongoing visibility into data quality performance, enabling data owners and stewards to identify and remediate issues before they impact business processes. (correct answer)
  2. Satisfy external audit requirements for data quality reporting.
  3. Justify the cost of the data governance program to senior management.
  4. Determine which employees require additional data management training.
Explanation: A data quality scorecard is a management tool providing continuous measurement of quality metrics, enabling proactive issue identification and remediation. Answer A is correct. External audit requirements (B) are a secondary consideration. Cost justification (C) is a governance activity but not the scorecard's primary purpose. Training needs (D) may be identified but are not the primary purpose.

Question 5

A data governance framework's 'data lineage' capability provides which of the following benefits?

  1. It automatically corrects data quality errors as data moves through systems.
  2. It encrypts data as it flows between source and target systems.
  3. It restricts data movement to approved pathways based on classification level.
  4. It documents the origin, movement, transformation, and consumption of data across systems, enabling impact analysis and root cause investigation of data quality issues. (correct answer)
Explanation: Data lineage maps how data flows from source through transformations to final consumption, enabling organizations to trace data quality issues to their source and understand the downstream impact of data changes. Answer D is correct. Automatic error correction (A) is a data quality tool function. Encryption (B) and access control (C) are security functions unrelated to lineage.

Question 6

Which of the following is a key indicator that data governance structures are operating effectively?

  1. The organization has purchased data governance software from a leading vendor.
  2. The CIO has delegated all data governance responsibilities to the IT department.
  3. Data quality metrics show improvement over time, data issues are resolved within defined SLAs, and business users report increased confidence in data for decision-making. (correct answer)
  4. The data governance committee has not needed to meet for six months.
Explanation: Effective data governance produces measurable outcomes: improving data quality, timely issue resolution, and increased user trust in data. Answer C is correct. Software purchase (A) is an input. IT-only governance (B) lacks business accountability. No governance committee meetings (D) suggests inactivity, not effectiveness.

Question 7

A company's data governance policy requires that all requests for access to confidential data domains must be approved by the data owner. An auditor finds that 40% of access approvals were granted by IT administrators without data owner involvement. This represents:

  1. An efficient process improvement reducing approval delays.
  2. An acceptable deviation since IT administrators understand data security requirements.
  3. A minor finding since the data owner policy applies only to external requests.
  4. A control deficiency - access approval authority was not followed, bypassing the data owner accountability required by the governance policy. (correct answer)
Explanation: The governance policy requires data owner approval specifically because the data owner is accountable for appropriate use. IT administrators approving access without data owner involvement bypasses this accountability structure. Answer D is correct. Efficiency (A) does not justify bypassing governance controls. Technical knowledge (B) does not replace business accountability. The policy applies to all access requests (C).

Question 8

An organization's data governance program includes a 'data issue management' process. The primary purpose of this process is to:

  1. Investigate and report data breaches to regulatory authorities.
  2. Manage the organization's data backup and recovery schedule.
  3. Provide a structured mechanism for reporting, prioritizing, investigating, and resolving data quality and integrity issues across the organization. (correct answer)
  4. Audit the performance of data stewards and data owners.
Explanation: Data issue management gives business users a formal channel to report data problems, ensures issues are tracked and prioritized, and drives timely resolution by accountable parties - a core operational element of data governance. Answer C is correct. Breach reporting (A) is incident management. Backup scheduling (B) is IT operations. Auditing roles (D) is a governance committee function.

Question 9

A financial services company implements a data governance framework and designates the CFO as the data owner for all financial reporting data. Which of the following actions by the CFO would best demonstrate effective data ownership?

  1. Delegating all data governance responsibilities to the data steward and taking no further involvement.
  2. Reviewing and approving access to financial reporting data, attesting to data quality at period-end, and escalating unresolved data quality issues to the governance committee. (correct answer)
  3. Directly managing the IT team's database administration activities.
  4. Publishing the financial reporting data specifications on the company intranet.
Explanation: Effective data ownership involves active accountability: controlling access, attesting to quality, and driving resolution of issues - not passive delegation or technical management. Answer B is correct. Full delegation (A) abdicates ownership responsibility. Database administration (C) is the custodian's role. Publishing specifications (D) is useful but insufficient demonstration of ownership.

Question 10

Which of the following best describes 'data sovereignty' as a consideration in a data governance framework?

  1. The principle that data is subject to the laws and regulations of the country or jurisdiction where it is stored or processed, affecting data residency and cross-border transfer decisions. (correct answer)
  2. The right of the organization to own all data generated by its employees.
  3. The technical capability of an organization to control access to its own data.
  4. The requirement that data governance policies be approved by the sovereign government.
Explanation: Data sovereignty means that data is governed by the legal jurisdiction in which it resides - impacting decisions about where data can be stored, who can access it, and what transfers are permissible across borders. Answer A is correct. Employee data ownership (B) is a separate employment law concept. Technical access control (C) is data security. Government policy approval (D) is not the meaning of data sovereignty.

Question 11

A company implements a data catalog as part of its data governance program. The primary purpose of a data catalog is to:

  1. Automatically encrypt all data assets discovered during catalog creation.
  2. Provide a searchable inventory of data assets across the organization, including metadata, data lineage, classification, and ownership information. (correct answer)
  3. Replace the organization's data warehouse with a more flexible data storage solution.
  4. Generate compliance reports for regulatory submissions.
Explanation: A data catalog is an organized inventory of data assets that enables users to discover, understand, and access data - documenting what data exists, where it lives, what it means, who owns it, and how it flows. Answer B is correct. Encryption (A), storage replacement (C), and compliance reporting (D) are not data catalog functions.

Question 12

Which of the following best describes the role of a 'data steward' in a data governance framework?

  1. A senior executive who approves all data access requests across the organization.
  2. A subject matter expert who implements data quality standards, resolves data issues, and serves as a liaison between data owners and data consumers. (correct answer)
  3. An IT administrator who manages database encryption and backup schedules.
  4. An external auditor who independently verifies data accuracy on behalf of regulators.
Explanation: A data steward is a hands-on operational role - typically a knowledgeable business or IT professional who manages data quality, enforces standards, and bridges the gap between data owners' requirements and data consumers' needs. Answer B is correct. Approving all access (A) is closer to the data owner role. IT administration (C) is the data custodian. External auditing (D) is a separate function.

Question 13

What is the primary difference between data governance and data management?

  1. Data governance focuses on database administration; data management focuses on strategic direction.
  2. Data governance establishes the policies, roles, and accountability framework; data management executes the operational activities of collecting, storing, processing, and using data within that framework. (correct answer)
  3. Data governance applies only to structured data; data management applies to all data types.
  4. Data governance is an external audit function; data management is an internal IT function.
Explanation: Data governance sets the 'rules of the road' - policies, roles, and oversight. Data management is the operational execution - the day-to-day activities of actually working with data following those rules. Answer B is correct. Governance is strategic, not database administration (A). Both apply to all data types (C). Governance is an internal business function (D).

Question 14

An organization's data governance framework requires periodic certification of data quality by data owners. This practice primarily supports which governance objective?

  1. Accountability - ensuring data owners regularly attest to the quality of their data domain and take ownership of issues. (correct answer)
  2. Availability - ensuring data is accessible to authorized users at all times.
  3. Security - ensuring data is protected from unauthorized access.
  4. Scalability - ensuring data infrastructure can grow with business needs.
Explanation: Periodic data quality certification makes data owners accountable by requiring them to formally attest to the state of their data, driving proactive issue identification and remediation. Answer A is correct. Availability (B), security (C), and scalability (D) are separate governance and IT management objectives.

Question 15

Which of the following data governance roles is typically responsible for ensuring that data privacy requirements are embedded in data governance policies and processes?

  1. Data custodian
  2. Data steward
  3. Data owner
  4. Chief Privacy Officer (CPO) or Data Protection Officer (DPO), in coordination with data owners. (correct answer)
Explanation: The CPO or DPO brings regulatory privacy expertise (GDPR, CCPA, HIPAA) to ensure privacy requirements are incorporated into data governance policies, working with data owners who are accountable for their domains. Answer D is correct. Custodians (A) implement technical controls. Stewards (B) manage operational quality. Data owners (C) are accountable for their domains but typically rely on privacy experts for regulatory guidance.

Question 16

A data governance committee is established at an organization. The primary purpose of this committee is to:

  1. Replace the internal audit function's role in data quality oversight.
  2. Manage the daily operations of all databases across the organization.
  3. Develop the organization's enterprise resource planning (ERP) system.
  4. Provide oversight and strategic direction for data governance initiatives, resolve cross-functional data issues, and ensure data policies align with organizational objectives. (correct answer)
Explanation: A data governance committee is a cross-functional oversight body that provides strategic direction, resolves conflicts, approves policies, and ensures alignment between data management practices and business strategy. Answer D is correct. It supplements, not replaces, internal audit (A). Daily operations (B) are management and IT functions. ERP development (C) is a project management activity.

Question 17

An auditor evaluating data governance structures finds that the organization has no documented data retention schedules for any data domain. The primary risk of this gap is:

  1. The organization may retain data longer than necessary (increasing privacy and storage risk) or delete data too soon (creating legal and regulatory compliance violations). (correct answer)
  2. The organization will be unable to perform data backups.
  3. External auditors will require all data to be retained indefinitely.
  4. The organization's data quality scores will automatically decline.
Explanation: Without retention schedules, data is either kept too long (increasing breach impact, storage costs, and GDPR minimization violations) or disposed of too early (destroying records needed for litigation, audits, or regulatory requirements). Answer A is correct. Retention schedules do not affect backup capability (B). External auditors do not mandate indefinite retention (C). Data quality is unaffected by retention schedules alone (D).

Question 18

An organization's data governance framework lacks clear accountability - no one is assigned as the owner of the customer master data. The most significant risk of this gap is:

  1. Customer data quality will deteriorate over time, leading to inconsistent, inaccurate records that affect customer service, billing, and reporting. (correct answer)
  2. The organization will be unable to purchase new database software.
  3. The IT department will be required to classify all customer data at the highest sensitivity level.
  4. External auditors will automatically issue an adverse opinion on the financial statements.
Explanation: Without a data owner, no one is accountable for maintaining customer data quality - resulting in inconsistencies, duplicates, and inaccuracies that degrade operational performance and reporting. Answer A is correct. Software purchasing (B), data classification defaults (C), and automatic audit opinions (D) are not consequences of missing data ownership.

Question 19

Data governance is best described as:

  1. A framework of policies, processes, roles, and standards that ensure data is managed as a strategic asset with appropriate quality, security, and compliance throughout its lifecycle. (correct answer)
  2. The technical process of backing up and restoring organizational data.
  3. The IT department's responsibility to manage database performance and storage.
  4. A regulatory requirement applicable only to financial institutions.
Explanation: Data governance is an enterprise-wide discipline encompassing policies, roles, accountability, and processes to ensure data is accurate, available, secure, and used appropriately. Answer A is correct. Backup and restore (B) is a technical IT function. Database performance (C) is IT operations. Data governance applies across all industries (D).

Question 20

Which of the following represents a key principle of effective data governance?

  1. Data governance should be managed exclusively by the IT department to ensure technical consistency.
  2. Data governance policies should be kept confidential to prevent misuse.
  3. Data governance requires clear accountability - defined roles, responsibilities, and ownership for each data domain across the organization. (correct answer)
  4. Data governance is a one-time initiative that is completed when initial policies are published.
Explanation: Effective data governance requires clear, defined accountability for each data domain - who owns it, who stewards it, and who is responsible for its quality and appropriate use. Answer C is correct. Governance requires business and IT collaboration (A). Policies must be communicated to be followed (B). Governance is an ongoing program, not a one-time project (D).