A healthcare organization is required by regulation to retain patient records for at least 7 years. The organization's backup policy currently overwrites backups every 30 days. What is the best way to meet the retention requirement?

Implement a backup retention policy that archives backups for 7 years, with the ability to restore older versions.

Keep only the latest backup and rely on the original records for older data.

Store backups on tape and keep them indefinitely, but do not test them.

Use a cloud backup service that automatically deletes backups after 30 days.

A company's backup policy requires that backups be tested quarterly and that the backup media be stored offsite. The IT team is implementing the backup process. Which step is most critical to ensure that the backups can be restored when needed?

Perform a test restore of a sample of backups quarterly.

Store backups offsite in a secure facility.

Encrypt all backups with a strong algorithm.

Use a backup scheduling tool to automate nightly backups.

A company's data protection policy states that data must be protected against unauthorized access, corruption, and theft. The company stores data in a cloud storage service. Which combination of controls best addresses all three goals?

Store data in a private cloud environment with dedicated hardware.

Use a strong password for the cloud account and enable multi-factor authentication.

Perform regular backups and store them in a different region.

Enable server-side encryption, implement IAM policies to restrict access, and enable versioning to protect against accidental deletion or corruption.

A company stores sensitive design documents on a file server. The security team is implementing controls to protect the data. Which set of controls directly addresses the goal of preventing unauthorized access?

Implement role-based access control (RBAC) and require multi-factor authentication (MFA) for file server access.

Set up a firewall to block all incoming traffic to the file server.

Encrypt the file server's hard drives with BitLocker.

Perform regular backups of the file server to an external drive.

What does encrypting backup data help ensure during transfer to an offsite storage location?

Confidentiality and integrity of the data while in transit

That only authorized personnel can initiate the backup

That the backup completes faster

That the backup is stored in a specific geographic location

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 1

Objective 3.1 Protect Data. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 8)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

41questions here

9free pages

12concepts

28%of the exam

Questions 36–40

36application · medium
A healthcare organization is required by regulation to retain patient records for at least 7 years. The organization's backup policy currently overwrites backups every 30 days. What is the best way to meet the retention requirement?
Select an answer first
37application · medium
A company's backup policy requires that backups be tested quarterly and that the backup media be stored offsite. The IT team is implementing the backup process. Which step is most critical to ensure that the backups can be restored when needed?
Select an answer first
38expert · hard
A company's data protection policy states that data must be protected against unauthorized access, corruption, and theft. The company stores data in a cloud storage service. Which combination of controls best addresses all three goals?
Select an answer first
39application · medium
A company stores sensitive design documents on a file server. The security team is implementing controls to protect the data. Which set of controls directly addresses the goal of preventing unauthorized access?
Select an answer first
40foundation · easy
What does encrypting backup data help ensure during transfer to an offsite storage location?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.