A user downloads a confidential file from a corporate server to a laptop and then sends it to a colleague via email. In which data state is the file when it is being transmitted over the email server?

Data at rest, because it is stored on the laptop.

Data in use, because the user is sending the email.

Data leakage, because the file is confidential.

Data in motion, because it is being transmitted over the network.

A company is implementing a data protection strategy. They have a mix of data at rest, in motion, and in use. They want to ensure that data is protected according to its state. Which approach is most effective?

Focus on DLP for all data states.

Implement access controls for all data states.

Apply state-specific controls: encryption for at rest, TLS for in motion, and access controls for in use.

Use a single encryption solution for all data states.

A security architect is designing a solution for a healthcare organization that must protect patient data in a database, during transmission to a web portal, and while being processed by an application. The organization must comply with HIPAA. Which combination of controls is most appropriate?

Database encryption and a firewall

Database encryption, TLS for web traffic, and application-level memory protection

TLS for web traffic and strong passwords

Full-disk encryption and antivirus

A company stores customer data in a database and also sends daily reports via email to managers. The company wants to protect the data both in the database and during email transmission. Which two controls should be implemented?

Strong passwords and two-factor authentication

Database encryption and email encryption (S/MIME or TLS)

Firewall and intrusion prevention system

Data loss prevention (DLP) and antivirus

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 13

2.13 Apply the Concepts of Data Loss, Data Leakage, Data in Motion, Data in Use, and Data at Rest Based on Common Standards 350-201 Practice Questions (Page 3)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

30%of the exam

Questions 11–15

11application · medium
A user downloads a confidential file from a corporate server to a laptop and then sends it to a colleague via email. In which data state is the file when it is being transmitted over the email server?
Select an answer first
12application · medium
A multinational company processes personal data of EU citizens. The company must ensure that data transferred to a non-EU country has adequate protection. Which standard primarily governs this requirement?
Select an answer first
13expert · hard
A company is implementing a data protection strategy. They have a mix of data at rest, in motion, and in use. They want to ensure that data is protected according to its state. Which approach is most effective?
Select an answer first
14expert · hard
A security architect is designing a solution for a healthcare organization that must protect patient data in a database, during transmission to a web portal, and while being processed by an application. The organization must comply with HIPAA. Which combination of controls is most appropriate?
Select an answer first
15application · medium
A company stores customer data in a database and also sends daily reports via email to managers. The company wants to protect the data both in the database and during email transmission. Which two controls should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.