DAMA DMF-1220 - Data Management Fundamentals

A DMZ (Demilitarized Zone) is a network segment that acts as a buffer between the public internet and an organization’s internal systems, protected by two firewalls. The DAMA-DMBOK explains: “A DMZ is typically configured with two firewalls: one between the DMZ and the external internet, and another between the DMZ and the internal network, to secure internal systems from external threats” (DMBOK2, Chapter 8: Data Security, p. 303).

Options A, B, C, and E are incorrect: A is nonsensical; B is vague; C includes the extranet, which is not standard; and E uses “intranet,” which is less precise than “internal systems.”

Data management focuses on managing data as an asset, distinct from IT, which focuses on technology infrastructure. The DAMA-DMBOK states: “Data management is the development, execution, and supervision of plans, policies, programs, and practices that control, protect, deliver, and enhance the value of data and information assets, whereas IT focuses on the technology that supports these activities” (DMBOK2, Chapter 1: Data Management, p. 15). Option A (reducing duplication through identity focus) is a data management outcome, not an IT function, as it involves data quality and master data management. Options B, C, D, and E describe IT-related activities (e.g., Big Data projects, platform migrations, document systems, and DG portals), which are often conflated with data management.

Data governance ensures policies align with data strategy but does not write or own security policies. The DAMA-DMBOK states: “Data governance should review and approve data security policies to ensure alignment with governance objectives, while security teams typically write and maintain these policies” (DMBOK2, Chapter 3: Data Governance, p. 119). Option D is correct.