Page 1 of 60
WGU D465 OBJECTIVE ASSESSMENT AND PRE -
ASSESSMENT DATA APPLICATIONS OA & PA
EXAM 2026 COMPLETE (198) CURRENT TESTING
QUESTIONS AND CORRECT ANSWERS WITH
DETAILED RATIONALES.
DATA
Prepare for the WGU D465 Objective Assessment and Pre-Assessment – Data
Applications (OA & PA) Exam with practice questions covering data analysis,
data interpretation, statistical concepts, data visualization, decision-making
techniques, and evidence-based problem-solving. This study guide helps
reinforce essential data applications knowledge and supports effective exam
preparation. Designed to improve analytical thinking skills and boost
confidence in applying data-driven concepts to real-world scenarios. Suitable
for WGU students and learners studying data applications and analytics.
Multiple choice.
Section 1: Data Management and Governance (Questions 1-20)
1 A multinational corporation is implementing a data governance framework. The data governance council has
approved a policy that classifies data into public, internal, confidential, and restricted. Which of the following is
the MOST critical challenge in operationalizing this classification across the organization?
A) Ensuring that all data assets are tagged with the correct classification level by data stewards.
B) Automatically detecting and classifying unstructured data in data lakes using machine learning.
C) Defining a consistent taxonomy for data classification that aligns with business terminology.
D) Balancing the need for data accessibility for analytics with the security controls for restricted data.
Answer: B
Rationale: The greatest challenge is automatically classifying unstructured data at scale, as manual tagging is
impractical and machine learning models require significant training and validation. Option A is a procedural issue
but not the most critical; C is a prerequisite but less operational; D is a design trade -off but not the primary
operational hurdle.
2 A healthcare organization is migrating its electronic health records (EHR) to a new cloud -based platform. As
part of data governance, they must ensure that data lineage is maintained. Which approach BEST captures the
provenance of transformed data during the migration?
A) Storing transformation scripts in a version-controlled repository and linking them to source data snapshots.
B) Embedding metadata tags in each record that record the source system, timestamp, and transformation
applied.
C) Using a data catalog that logs every query and transformation executed on the data during the migration
process.
D) Implementing a data lineage tool that captures and visualizes the end-to-end flow from source to target,
including transformation logic.
Answer: D
, Page 2 of 60
Rationale: A dedicated data lineage tool provides automated capture of data flow and transformations, ensuring
comprehensive provenance. Option A captures scripts but not actual execution; B is granular but may miss context;
C captures queries but not necessarily transformations in ETL pipelines. D is the industry best practice for complex
migrations.
3 A financial institution is designing a master data management (MDM) solution to consolidate customer data
from multiple siloed systems. Which MDM architecture would be MOST appropriate if the institution requires
near-real-time synchronization and a single source of truth for customer profiles across all channels?
A) Registry style, where a centralized index points to the best record in each source system.
B) Consolidation style, where a central hub stores a merged view of customer data and periodically updates
source systems.
C) Coexistence style, where source systems maintain their own data and a central hub provides a unified view via
integration.
D) Transaction hub style, where the central hub is the system of record and all source systems synchronize with
it in real time.
, Page 3 of 60
Answer: D
Rationale: Transaction hub architecture ensures the central hub is the authoritative source and all systems update
synchronously, providing near-real-time consistency. Registry (A) does not store data centrally; Consolidation (B)
is batch-oriented; Coexistence (C) allows source systems to diverge. D meets the requirement for a single source of
truth with real-time sync.
4 A data governance team is evaluating data quality in a customer relationship management (CRM) system. They
find that 15% of records have missing phone numbers, and 8% have duplicate entries for the same customer.
Which combination of data quality dimensions is MOST directly affected by these issues?
A) Completeness and uniqueness.
B) Accuracy and consistency.
C) Timeliness and validity.
D) Integrity and accessibility.
Answer: A
Rationale: Missing phone numbers directly impact completeness (the extent to which data is not missing). Duplicate
entries affect uniqueness (no duplicate representations). Accuracy (correctness) and consistency (agreement across
sources) are not directly indicated. Timeliness (currency) and validity (conformance to format) are not the primary
concerns here.
5 Under the General Data Protection Regulation (GDPR), a data controller must conduct a Data Protection Impact
Assessment (DPIA) before processing personal data that is likely to result in high risk to individuals. Which of
the following scenarios would MOST likely require a DPIA?
A) A hospital updates its patient portal to allow patients to view their lab results online.
B) A retail company uses customer purchase history to send targeted email promotions.
C) A bank implements a new system to automatically assess creditworthiness using machine learning on
customer financial data.
D) A university stores student transcripts in a secure cloud storage service for backup purposes.
Answer: C
Rationale: Automated decision-making using machine learning on sensitive financial data is a high-risk processing
activity explicitly requiring a DPIA under GDPR. Option A is a low-risk update; B is common marketing; D is
standard storage. C involves profiling and automated decisions that could significantly affect individuals' rights.
6 A data governance team is establishing metrics to monitor the effectiveness of their data stewardship program.
Which metric would BEST indicate that data stewards are proactively managing data quality issues?
A) Number of data quality incidents reported by end users per month.
B) Average time to resolve data quality tickets from initial report to closure.
C) Percentage of data quality issues identified and corrected before impacting business processes.
D) Number of data governance training sessions attended by data stewards annually.
Answer: C
Rationale: Proactive management is indicated by issues caught before they affect operations. Option C directly
measures this. Option A measures reactive incidents; B measures resolution efficiency, not proactivity; D measures
training attendance, not actual stewardship actions. C is the most meaningful indicator of proactive data quality
management.
7 A company is designing a data retention policy to comply with both the California Consumer Privacy Act
(CCPA) and the Sarbanes-Oxley Act (SOX). Which approach BEST reconciles the conflicting requirements of
these regulations?
, Page 4 of 60
A) Retain all data indefinitely to ensure compliance with both regulations.
B) Apply the shortest retention period required by any regulation to minimize risk.
C) Classify data by type and apply the longest relevant retention period for each category.
D) Delete personal data upon consumer request under CCPA, but retain financial records for SOX-mandated
periods.
Answer: D
Rationale: CCPA requires deletion of personal data upon request, while SOX mandates retention of financial records
for a specific period (e.g., 7 years). The correct approach is to handle each data type according to its specific
regulatory requirement, which may mean deleting some data while retaining others. Option A violates CCPA; B
violates SOX; C may over-retain personal data. D is compliant with both.
8 An organization's data governance framework includes a policy that all data must be classified as 'sensitive' if it
contains personally identifiable information (PII). A data analyst discovers that a dataset containing email
addresses and IP addresses has been labeled as 'internal' but not 'sensitive'. What is the MOST appropriate
immediate action?
A) Reclassify the dataset as 'sensitive' and notify the data governance council.
B) Escalate the issue to the data steward responsible for the dataset for correction.
C) Ignore the misclassification because email and IP addresses are not always considered PII.
D) Delete the dataset to prevent any potential compliance violation.
Answer: B
Rationale: The data steward is responsible for data classification and should correct the error. Immediate
reclassification by the analyst (A) may bypass governance procedures; ignoring it (C) is risky as email and IP
addresses are often PII under many regulations; deletion (D) is extreme and unnecessary. Escalation ensures proper
review and correction.
9 A data governance team is implementing a metadata management solution. They need to ensure that business
glossaries are linked to technical metadata, enabling users to understand the meaning and origin of data
elements. Which standard would BEST support this integration?
A) ISO 8000 for data quality.
B) ISO 27001 for information security management.
C) ISO 11179 for metadata registries.
D) ISO 31000 for risk management.
Answer: C
Rationale: ISO 11179 provides a framework for metadata registries, including naming conventions and definitions
that link business terms to technical attributes. ISO 8000 (A) is for data quality; ISO 27001 (B) is security; ISO
31000 (D) is risk management. Only ISO 11179 directly addresses metadata management and integration.
10 A data governance council is reviewing a proposal to implement a data lake for advanced analytics. The
proposal includes a 'schema-on-read' approach. Which governance challenge is MOST likely to arise with this
approach?
A) Difficulty in enforcing data quality rules because data is not validated at ingestion.
B) Increased storage costs due to duplicating data for each analytical use case.
C) Inability to support real-time data ingestion from streaming sources.
D) Lack of support for structured data formats like CSV and Parquet.
Answer: A
Rationale: Schema-on-read means data is stored in raw form and schema is applied only when reading. This makes
it challenging to enforce data quality rules at ingestion, leading to potential quality issues downstream. Storage
WGU D465 OBJECTIVE ASSESSMENT AND PRE -
ASSESSMENT DATA APPLICATIONS OA & PA
EXAM 2026 COMPLETE (198) CURRENT TESTING
QUESTIONS AND CORRECT ANSWERS WITH
DETAILED RATIONALES.
DATA
Prepare for the WGU D465 Objective Assessment and Pre-Assessment – Data
Applications (OA & PA) Exam with practice questions covering data analysis,
data interpretation, statistical concepts, data visualization, decision-making
techniques, and evidence-based problem-solving. This study guide helps
reinforce essential data applications knowledge and supports effective exam
preparation. Designed to improve analytical thinking skills and boost
confidence in applying data-driven concepts to real-world scenarios. Suitable
for WGU students and learners studying data applications and analytics.
Multiple choice.
Section 1: Data Management and Governance (Questions 1-20)
1 A multinational corporation is implementing a data governance framework. The data governance council has
approved a policy that classifies data into public, internal, confidential, and restricted. Which of the following is
the MOST critical challenge in operationalizing this classification across the organization?
A) Ensuring that all data assets are tagged with the correct classification level by data stewards.
B) Automatically detecting and classifying unstructured data in data lakes using machine learning.
C) Defining a consistent taxonomy for data classification that aligns with business terminology.
D) Balancing the need for data accessibility for analytics with the security controls for restricted data.
Answer: B
Rationale: The greatest challenge is automatically classifying unstructured data at scale, as manual tagging is
impractical and machine learning models require significant training and validation. Option A is a procedural issue
but not the most critical; C is a prerequisite but less operational; D is a design trade -off but not the primary
operational hurdle.
2 A healthcare organization is migrating its electronic health records (EHR) to a new cloud -based platform. As
part of data governance, they must ensure that data lineage is maintained. Which approach BEST captures the
provenance of transformed data during the migration?
A) Storing transformation scripts in a version-controlled repository and linking them to source data snapshots.
B) Embedding metadata tags in each record that record the source system, timestamp, and transformation
applied.
C) Using a data catalog that logs every query and transformation executed on the data during the migration
process.
D) Implementing a data lineage tool that captures and visualizes the end-to-end flow from source to target,
including transformation logic.
Answer: D
, Page 2 of 60
Rationale: A dedicated data lineage tool provides automated capture of data flow and transformations, ensuring
comprehensive provenance. Option A captures scripts but not actual execution; B is granular but may miss context;
C captures queries but not necessarily transformations in ETL pipelines. D is the industry best practice for complex
migrations.
3 A financial institution is designing a master data management (MDM) solution to consolidate customer data
from multiple siloed systems. Which MDM architecture would be MOST appropriate if the institution requires
near-real-time synchronization and a single source of truth for customer profiles across all channels?
A) Registry style, where a centralized index points to the best record in each source system.
B) Consolidation style, where a central hub stores a merged view of customer data and periodically updates
source systems.
C) Coexistence style, where source systems maintain their own data and a central hub provides a unified view via
integration.
D) Transaction hub style, where the central hub is the system of record and all source systems synchronize with
it in real time.
, Page 3 of 60
Answer: D
Rationale: Transaction hub architecture ensures the central hub is the authoritative source and all systems update
synchronously, providing near-real-time consistency. Registry (A) does not store data centrally; Consolidation (B)
is batch-oriented; Coexistence (C) allows source systems to diverge. D meets the requirement for a single source of
truth with real-time sync.
4 A data governance team is evaluating data quality in a customer relationship management (CRM) system. They
find that 15% of records have missing phone numbers, and 8% have duplicate entries for the same customer.
Which combination of data quality dimensions is MOST directly affected by these issues?
A) Completeness and uniqueness.
B) Accuracy and consistency.
C) Timeliness and validity.
D) Integrity and accessibility.
Answer: A
Rationale: Missing phone numbers directly impact completeness (the extent to which data is not missing). Duplicate
entries affect uniqueness (no duplicate representations). Accuracy (correctness) and consistency (agreement across
sources) are not directly indicated. Timeliness (currency) and validity (conformance to format) are not the primary
concerns here.
5 Under the General Data Protection Regulation (GDPR), a data controller must conduct a Data Protection Impact
Assessment (DPIA) before processing personal data that is likely to result in high risk to individuals. Which of
the following scenarios would MOST likely require a DPIA?
A) A hospital updates its patient portal to allow patients to view their lab results online.
B) A retail company uses customer purchase history to send targeted email promotions.
C) A bank implements a new system to automatically assess creditworthiness using machine learning on
customer financial data.
D) A university stores student transcripts in a secure cloud storage service for backup purposes.
Answer: C
Rationale: Automated decision-making using machine learning on sensitive financial data is a high-risk processing
activity explicitly requiring a DPIA under GDPR. Option A is a low-risk update; B is common marketing; D is
standard storage. C involves profiling and automated decisions that could significantly affect individuals' rights.
6 A data governance team is establishing metrics to monitor the effectiveness of their data stewardship program.
Which metric would BEST indicate that data stewards are proactively managing data quality issues?
A) Number of data quality incidents reported by end users per month.
B) Average time to resolve data quality tickets from initial report to closure.
C) Percentage of data quality issues identified and corrected before impacting business processes.
D) Number of data governance training sessions attended by data stewards annually.
Answer: C
Rationale: Proactive management is indicated by issues caught before they affect operations. Option C directly
measures this. Option A measures reactive incidents; B measures resolution efficiency, not proactivity; D measures
training attendance, not actual stewardship actions. C is the most meaningful indicator of proactive data quality
management.
7 A company is designing a data retention policy to comply with both the California Consumer Privacy Act
(CCPA) and the Sarbanes-Oxley Act (SOX). Which approach BEST reconciles the conflicting requirements of
these regulations?
, Page 4 of 60
A) Retain all data indefinitely to ensure compliance with both regulations.
B) Apply the shortest retention period required by any regulation to minimize risk.
C) Classify data by type and apply the longest relevant retention period for each category.
D) Delete personal data upon consumer request under CCPA, but retain financial records for SOX-mandated
periods.
Answer: D
Rationale: CCPA requires deletion of personal data upon request, while SOX mandates retention of financial records
for a specific period (e.g., 7 years). The correct approach is to handle each data type according to its specific
regulatory requirement, which may mean deleting some data while retaining others. Option A violates CCPA; B
violates SOX; C may over-retain personal data. D is compliant with both.
8 An organization's data governance framework includes a policy that all data must be classified as 'sensitive' if it
contains personally identifiable information (PII). A data analyst discovers that a dataset containing email
addresses and IP addresses has been labeled as 'internal' but not 'sensitive'. What is the MOST appropriate
immediate action?
A) Reclassify the dataset as 'sensitive' and notify the data governance council.
B) Escalate the issue to the data steward responsible for the dataset for correction.
C) Ignore the misclassification because email and IP addresses are not always considered PII.
D) Delete the dataset to prevent any potential compliance violation.
Answer: B
Rationale: The data steward is responsible for data classification and should correct the error. Immediate
reclassification by the analyst (A) may bypass governance procedures; ignoring it (C) is risky as email and IP
addresses are often PII under many regulations; deletion (D) is extreme and unnecessary. Escalation ensures proper
review and correction.
9 A data governance team is implementing a metadata management solution. They need to ensure that business
glossaries are linked to technical metadata, enabling users to understand the meaning and origin of data
elements. Which standard would BEST support this integration?
A) ISO 8000 for data quality.
B) ISO 27001 for information security management.
C) ISO 11179 for metadata registries.
D) ISO 31000 for risk management.
Answer: C
Rationale: ISO 11179 provides a framework for metadata registries, including naming conventions and definitions
that link business terms to technical attributes. ISO 8000 (A) is for data quality; ISO 27001 (B) is security; ISO
31000 (D) is risk management. Only ISO 11179 directly addresses metadata management and integration.
10 A data governance council is reviewing a proposal to implement a data lake for advanced analytics. The
proposal includes a 'schema-on-read' approach. Which governance challenge is MOST likely to arise with this
approach?
A) Difficulty in enforcing data quality rules because data is not validated at ingestion.
B) Increased storage costs due to duplicating data for each analytical use case.
C) Inability to support real-time data ingestion from streaming sources.
D) Lack of support for structured data formats like CSV and Parquet.
Answer: A
Rationale: Schema-on-read means data is stored in raw form and schema is applied only when reading. This makes
it challenging to enforce data quality rules at ingestion, leading to potential quality issues downstream. Storage
