Describe Data Security Elements, AAA, and GRC DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is an example of a governance activity in data protection?

   • AInstalling a firewall to protect the network
   • BDefining a data retention policy that specifies how long backups must be kept
   • CMonitoring backup logs for failed jobs
   • DRestoring a corrupted database from a backup
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A multinational corporation is aligning its IT security strategy with its business objectives. The board wants to ensure that security investments are prioritized based on potential business impact, and that policies are in place to guide decision-making. They also need to demonstrate compliance with industry regulations. Which framework best describes this approach?

   • AGovernance, Risk, and Compliance (GRC)
   • BRisk Management Process
   • CAAA Framework
   • DCIA Triad
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A user successfully logs in to a backup management system but is unable to delete any backup jobs. What is the most likely reason for this?

   • AThe user's password has expired
   • BThe user's authentication failed
   • CThe user lacks the necessary authorization permissions
   • DThe accounting system is not recording the user's actions
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare provider is evaluating the risk of a data breach. They identify that patient records are stored on an aging storage system with no encryption, and that a breach could result in regulatory fines and reputational damage. They decide to implement encryption and upgrade the storage system. Which process is being applied?

   • ARisk Management
   • BCompliance
   • CGovernance
   • DAccounting
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary function of authorization in a data protection system?

   • ATo verify the identity of users attempting to access the system
   • BTo control what resources a user can access and what actions they can perform
   • CTo record user activities for auditing and compliance
   • DTo encrypt data to protect it from unauthorized access
   Reveal Solution Discussion Select an answer first