5.3. Recognize How Company Policies and Confidentiality Guidelines Protect User Data. 100-140 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A software company's source code repository contains both open-source libraries and proprietary code developed in-house. The proprietary code is considered a trade secret. A developer accidentally commits the proprietary code to a public repository. What is the immediate priority?

   • AContact the developer and ask them to remove the code from their local machine.
   • BDelete the repository and hope no one has seen the code.
   • CChange the repository to private and continue working.
   • DReport the incident to the security team and follow the incident response plan.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A manufacturing company's R&D team creates a new alloy formula that gives their products a competitive advantage. The formula is stored in a shared folder accessible to all employees. According to data classification, what should the IT support team do?

   • AEncrypt the file but keep the folder accessible to all employees.
   • BRestrict access to the folder to only the R&D team and label it as proprietary.
   • CLeave the folder as is because the formula is not personal data.
   • DMove the formula to a public cloud storage service for better collaboration.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A support technician needs to send a file containing customer credit card numbers to a colleague in another department. The company's confidentiality guidelines require encryption for sensitive data in transit. What should the technician do?

   • ASend the file as an email attachment with a password in the same email
   • BPrint the file and hand it to the colleague in person
   • CUpload the file to a shared drive without any additional protection
   • DUse the company's approved encrypted file transfer tool and share the password through a separate channel
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company's marketing team asks IT to grant them access to a folder containing the company's upcoming product launch plans. The team argues they need the information to prepare promotional materials. The product launch plans are classified as confidential. What should IT do?

   • AGrant access because the marketing team has a legitimate business need.
   • BDeny access because the marketing team is not part of the product development team.
   • CGrant access only after the data owner approves the request and the access is logged.
   • DProvide the marketing team with a summary of the launch plans instead of full access.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A customer service representative receives a request from a customer to change the email address on their account. The customer provides the account number and the last four digits of their social security number. According to confidentiality guidelines, what should the representative do?

   • AChange the email address only if the customer calls from a registered phone number.
   • BAsk for additional verification such as a one-time passcode sent to the current email or phone.
   • CChange the email address because the customer provided sufficient verification.
   • DRefuse to change the email address because the customer cannot provide the full social security number.
   Reveal Solution Discussion Select an answer first