A company is decommissioning an old server that contains customer records. The hard drives will be physically removed and disposed of. The company's privacy policy requires that customer data be irrecoverable. What should the company do before disposing of the drives?

Delete the files and empty the recycle bin on the server.

Perform a secure wipe of the drives using a tool that overwrites the data multiple times.

Encrypt the drives and then dispose of them without wiping.

Reformat the drives using the operating system's quick format option.

A company is developing a new application and needs to test it with realistic data. The production database contains customer PII. The company wants to use a subset of this data in a development environment without exposing the PII. The development team needs the data to maintain referential integrity and be usable for testing. Which approach should they use?

Encrypt the PII fields in the development database.

Delete all PII fields from the development database.

Mask the PII fields in the development database.

Use a random subset of the production data without any changes.

What is the primary privacy risk when data is transmitted over an unencrypted network?

Insufficient access controls on databases

Data corruption due to disk failure

Unauthorized access to stored data

A financial services company has a web application that allows customers to view account balances and transfer funds. The application communicates with a backend API over the internet. A security audit reveals that the API endpoints are accessible via HTTP and HTTPS. The company wants to ensure that all customer data is protected during transmission. What should the development team implement?

Use HTTP for internal API calls and HTTPS only for external customer-facing endpoints.

Enforce HTTPS on all API endpoints and redirect any HTTP requests to HTTPS.

Implement IPsec between the client and the API server to encrypt all traffic.

Use a custom encryption algorithm in the application layer to protect data before sending it over HTTP.

CiscoCertified DevNet Professional

Domain 4Objective 7

Explain Data Privacy Concerns Related to Storage and Transmission of Data 350-901 Practice Questions (Page 6)

Part of the 4.0 Application Deployment and Security domain, which accounts for 20% of the 350-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

20%of the exam

Questions 26–30

26application · medium
A company is decommissioning an old server that contains customer records. The hard drives will be physically removed and disposed of. The company's privacy policy requires that customer data be irrecoverable. What should the company do before disposing of the drives?
Select an answer first
27expert · hard
A company is developing a new application and needs to test it with realistic data. The production database contains customer PII. The company wants to use a subset of this data in a development environment without exposing the PII. The development team needs the data to maintain referential integrity and be usable for testing. Which approach should they use?
Select an answer first
28foundation · easy
What is the primary privacy risk when data is transmitted over an unencrypted network?
Select an answer first
29application · medium
A financial services company has a web application that allows customers to view account balances and transfer funds. The application communicates with a backend API over the internet. A security audit reveals that the API endpoints are accessible via HTTP and HTTPS. The company wants to ensure that all customer data is protected during transmission. What should the development team implement?
Select an answer first
30application · medium
A company's mobile app sends sensitive user data to a backend server. The app currently uses a custom binary protocol over TCP. A security review recommends using a standard encryption protocol to protect the data in transit. Which protocol should the development team adopt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-901” is a trademark of its owner, used for identification only.

Explain Data Privacy Concerns Related to Storage and Transmission of Data 350-901 Practice Questions (Page 6)

Questions 26–30

A company is decommissioning an old server that contains customer records. The hard drives will be physically removed and disposed of. The company's privacy policy requires that customer data be irrecoverable. What should the company do before disposing of the drives?

What is the primary privacy risk when data is transmitted over an unencrypted network?

A company's mobile app sends sensitive user data to a backend server. The app currently uses a custom binary protocol over TCP. A security review recommends using a standard encryption protocol to protect the data in transit. Which protocol should the development team adopt?

Keep studying — 4.0 Application Deployment and Security