Data Security in Cloud CCSE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which of the following is a common technique used by DLP solutions to identify sensitive data?

   • AUser authentication
   • BNetwork traffic encryption
   • CData compression
   • DContent inspection and contextual analysis
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A retail company needs to provide a third-party analytics vendor with a copy of its customer database for testing. The database contains credit card numbers, email addresses, and purchase history. The vendor does not need to see the actual credit card numbers but needs to join records by a unique identifier. Which technique should be used?

   • AEncrypt the entire database with a key shared with the vendor
   • BRemove the credit card numbers and email addresses entirely
   • CTokenize the credit card numbers and email addresses while preserving a consistent token for each customer
   • DMask the credit card numbers and replace email addresses with random values
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company uses a cloud KMS to encrypt data. An employee with access to the KMS accidentally deleted a key that was used to encrypt a database. The company has a backup of the database but cannot decrypt it. What should be done to prevent this situation in the future?

   • AEnable key deletion protection and require multi-factor authentication for key deletion
   • BDisable key rotation to avoid accidental deletion
   • CStore a copy of the key in the database backup
   • DUse a service-managed key instead of a customer-managed key
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A multinational company must retain financial records for 7 years per local law, but also must delete EU customer personal data upon request under GDPR. The company uses a single cloud storage bucket for all records. What is the most effective way to handle these conflicting requirements?

   • AClassify data at ingestion and apply separate retention policies: 7 years for financial records and immediate deletion for personal data upon request.
   • BStore all data for 7 years and rely on the right to erasure not applying to financial records.
   • CDelete all data after 7 years and ignore erasure requests because the data is in the cloud.
   • DMove all data to a single region and apply a uniform retention policy of 7 years.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company runs a critical database in the cloud. The recovery point objective (RPO) is 15 minutes and the recovery time objective (RTO) is 1 hour. Which backup strategy meets these requirements?

   • AEnable point-in-time restore with a 15-minute granularity and automate failover to a standby replica
   • BUse a read replica for reporting and take a daily snapshot
   • CTake a full backup every 24 hours and store it in a different region
   • DTake a full backup weekly and rely on transaction log backups every hour
   Reveal Solution Discussion Select an answer first