Objective 5.2 Implement Countermeasures Used to Ensure Data Privacy. CERTIFIED-IOT-SECURITY-PRACTITIONER Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A smart city project collects traffic camera footage that includes license plates and faces. The retention period for this data has expired. What is the most secure method to dispose of this data?

   • AReformat the hard drive and reinstall the operating system.
   • BDelete the files and empty the recycle bin.
   • CUse a secure erase utility that overwrites the data, then physically destroy the storage media.
   • DOverwrite the storage media with random data multiple times before reuse or disposal.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A smart home security company stores video footage from customers' cameras. The company must protect the footage from unauthorized access, ensure that only the customer and approved support staff can view it, and securely delete footage after 30 days. Which combination of controls best meets these requirements?

   • AEncrypt footage at rest, implement ABAC for access, and use a secure deletion process that overwrites the data.
   • BStore footage in a private cloud and rely on the cloud provider's security.
   • CUse a strong password for the storage system and delete files manually after 30 days.
   • DMask the faces in the footage and keep it for 90 days.
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   Which factor should be considered when defining a data retention period for personal data collected by an IoT device?

   • AThe cost of storage hardware
   • BThe purpose for which the data was collected and any legal requirements
   • CThe number of users of the device
   • DThe color of the device
   Reveal Solution Discussion Select an answer first