Data Protection SY0-701 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A government contractor is implementing a data classification scheme. They have defined four levels: Public, Internal, Confidential, and Secret. The contractor needs to ensure that all employees can identify the classification of a document by looking at it. What is the most important implementation step to achieve this?

   • AApply clear and consistent labeling to all documents and files
   • BRestrict access to all documents to a small group of administrators
   • CEncrypt all documents with the highest level of encryption
   • DStore all documents in a single, secure repository
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A research organization handles data classified as 'Confidential'. The organization's data handling policy states that confidential data must be encrypted at rest and in transit. A researcher needs to share a large dataset with an external collaborator. The collaborator's organization does not have a secure file transfer system. What is the most secure method for the researcher to share the data?

   • AUpload the dataset to a public file-sharing service and send the link to the collaborator
   • BEncrypt the dataset with a strong password, upload it to a secure cloud storage service, and share the password via a separate, secure channel
   • CBurn the dataset to a DVD and mail it to the collaborator
   • DSend the dataset as an email attachment with a password-protected zip file
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An employee at a law firm needs to send a document containing sensitive client information to an external attorney. The document is classified as 'Confidential'. According to the firm's data handling procedures, what is the most appropriate method to send this document?

   • APrint the document and send it via standard postal mail
   • BUpload the document to a public cloud storage and share the link
   • CEncrypt the document with a strong password and send it via a secure file transfer service
   • DSend the document as a standard email attachment
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst is investigating a potential data breach. The analyst needs to determine if a specific configuration file was modified after a known good backup was taken. The analyst has the original SHA-256 hash of the file from the backup. What is the most appropriate next step?

   • ARestore the file from the backup and assume it is correct
   • BDecrypt the current file and compare its contents to the backup
   • CCalculate the SHA-256 hash of the current file and compare it to the original hash
   • DCheck the file's access control list (ACL) to see who modified it
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large enterprise is designing a data classification scheme. They have a mix of data types: public marketing materials, internal project plans, confidential employee HR records, and secret intellectual property. The security team is debating between a simple 3-tier scheme (Public, Internal, Confidential) and a more granular 5-tier scheme (Public, Internal, Confidential, Secret, Top Secret). The compliance team requires that access to HR records and IP be strictly audited and limited. What is the most important factor in deciding the number of classification levels?

   • AThe preference of the security team
   • BThe granularity needed to enforce distinct security controls and access requirements
   • CThe cost of implementing the classification labels
   • DThe number of employees in the organization
   Reveal Solution Discussion Select an answer first