CERTIFIED-DATA-ANALYST-ASSOCIATE Question #19: Real Exam Question with Answer & Explanation

Question

A data analyst has been asked to provide a list of options on how to share a dashboard with a client. It is a security requirement that the client does not gain access to any other information, resources, or artifacts in the database. Which of the following approaches cannot be used to share the dashboard and meet the security requirement?

Options

• ADownload the Dashboard as a PDF and share it with the client.
• BSet a refresh schedule for the dashboard and enter the client's email address in the "Subscribers"
• CTake a screenshot of the dashboard and share it with the client.
• DGenerating a Personal Access Token that is good for 1 day and sharing it with the client. This
• EDownload a PNG file of the visualizations in the dashboard and share them with the client.

Explanation

Option D violates the security requirement because a Personal Access Token (PAT) grants programmatic access to the platform itself - not just the dashboard - meaning the client could use it to query the database, access other resources, or explore other artifacts within the system, even if only valid for 1 day. Options A, C, and E are all safe because they share only static, read-only snapshots (PDF, screenshot, PNG) with no platform access whatsoever. Option B (email subscription) is also safe because the client only receives a rendered email of the dashboard output, never gaining login access or credentials to the platform. The key distinction to remember is: static exports share content, tokens share access - any credential or token tied to a platform account inherently opens a door beyond the dashboard itself.

No community discussion yet for this question.