2.13 Apply the Concepts of Data Loss, Data Leakage, Data in Motion, Data in Use, and Data at Rest Based on Common Standards 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial analyst is working on a sensitive spreadsheet on a laptop. The file is saved to an encrypted hard drive. While the analyst is editing the spreadsheet, a malicious program captures the keystrokes and sends them to an external server. In which data state was the information when it was compromised?

   • AData at rest, because the file was saved on the hard drive.
   • BData leakage, because the data was disclosed to an external server.
   • CData in motion, because the keystrokes were sent over the network.
   • DData in use, because the analyst was actively editing the data.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is designing a data protection strategy for a new application that stores sensitive data in a database and also sends data to a third-party API over the internet. The company must protect the data in all states. Which approach is most comprehensive?

   • AEncrypt the database and use TLS for API calls
   • BUse full-disk encryption, TLS for API calls, and secure memory handling
   • CUse a firewall and intrusion prevention system
   • DImplement strong access controls and audit logging
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security analyst is investigating an incident where a database containing customer PII was copied by an attacker and then deleted from the server. The attacker also exfiltrated the data to an external server. Which classification best describes this incident?

   • AData loss only, because the data was deleted from the server.
   • BData in motion breach, because the data was transmitted to the external server.
   • CData leakage only, because the data was exfiltrated.
   • DBoth data loss and data leakage.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A user is composing an email in a webmail client, and the content is temporarily held in the computer's RAM while the application is running. Which data state does this represent?

   • AData in use
   • BData in transit
   • CData at rest
   • DData in motion
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A multinational company processes personal data of EU residents and stores it in a data center in the EU. The company also transfers some data to a subsidiary in a country that does not have an adequacy decision from the EU. The company must ensure compliance with GDPR. Which measure is most appropriate to legitimize the transfer?

   • AObtain explicit consent from each data subject
   • BEncrypt the data during transfer
   • CStore the data only in the EU and do not transfer it
   • DUse Standard Contractual Clauses (SCCs) approved by the EU
   Reveal Solution Discussion Select an answer first