Explain Cybersecurity DATA-PROTECTION-MANAGEMENT-FOUNDATIONS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital's backup administrator receives a phone call from someone claiming to be a vendor support engineer who needs the backup admin password to 'fix a critical issue.' The caller is insistent and mentions the hospital's backup software by name. The administrator does not recognize the caller and has no open support ticket. Which threat does this represent, and what is the appropriate response?

   • AInsider threat; the caller is likely a disgruntled employee
   • BRansomware; disconnect the backup system immediately
   • CPhishing; report the email to the security team
   • DSocial engineering; refuse to provide the password and verify the caller through official channels
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which cybersecurity threat is most likely to originate from an employee who intentionally leaks sensitive company data?

   • ADistributed denial of service (DDoS)
   • BRansomware
   • CPhishing
   • DInsider threat
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of the defense-in-depth strategy?

   • ATo eliminate the need for regular security monitoring by automating all controls
   • BTo rely on a single, strong security control to protect all assets
   • CTo use multiple layers of security controls so that if one fails, others still provide protection
   • DTo ensure that all security controls are implemented by the same vendor for consistency
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A multinational corporation must comply with data residency regulations that require backups of EU customer data to remain within the EU. The corporation also has a business continuity requirement to recover data within 4 hours of a regional outage. The backup administrator is evaluating two designs: (A) a single backup copy in an EU region, and (B) a primary backup in the EU and a secondary copy in a non-EU region. Which design satisfies both requirements?

   • ADesign A with an additional EU region copy, because it meets both residency and recovery requirements
   • BDesign B, because it meets the recovery requirement but violates data residency regulations
   • CDesign B with encryption, because encryption makes the non-EU copy compliant
   • DDesign A, because it meets data residency but may fail the 4-hour recovery requirement during a regional outage
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A government agency's backup administrator is asked to ensure that backup tapes containing classified data are encrypted and that only personnel with a specific security clearance can access the tape library. Which cybersecurity goal is the administrator primarily addressing?

   • ANon-repudiation — proving who accessed the data
   • BIntegrity — ensuring the data is not altered
   • CAvailability — ensuring the data is accessible when needed
   • DConfidentiality — protecting the data from unauthorized access
   Reveal Solution Discussion Select an answer first