A company wants to prevent employees from sending sensitive customer data via personal webmail. They also want to be alerted if sensitive data is stored on a local workstation. Which solution should be deployed?

Block access to personal webmail sites using a web filter.

Encrypt all local drives with BitLocker.

Use an email gateway to encrypt all outbound emails.

Deploy a DLP solution that monitors outbound web traffic and scans local storage for sensitive data patterns.

A government agency is decommissioning a storage array that contains classified documents. The agency's policy requires that data be destroyed to a standard that prevents any possible recovery, even with advanced forensic techniques. The storage array uses solid-state drives (SSDs). The agency also needs to maintain a chain of custody for compliance. Which method should be used?

Use the ATA Secure Erase command

Physically shred the SSDs and document the destruction process

Perform a single overwrite of the SSDs with random data

A financial institution must provide a development team with a copy of the production database for testing. The database contains customer account numbers, social security numbers (SSNs), and transaction histories. The development team needs to test features that depend on the format of SSNs and the relationships between accounts and transactions. The institution wants to minimize the risk of exposing real PII. Which approach is best?

Provide the development team with a subset of the data that excludes SSNs and account numbers.

Encrypt the database and provide the development team with the decryption key.

Mask the SSNs and account numbers with realistic fake values, preserving the format and referential integrity.

Delete all rows containing SSNs and account numbers before copying the database.

A company is subject to a regulation that requires retaining audit logs for 3 years. After 3 years, the logs must be securely deleted. The company's IT team is designing a log management system. Which approach best ensures compliance?

Manually delete logs at the end of each year

Encrypt the logs and store them indefinitely

Keep logs for 5 years to be safe

Implement automated retention policies that archive logs for 3 years and then securely delete them

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 2

Data Security CCT Practice Questions (Page 1)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

10concepts

Questions 1–5

1application · medium
A company wants to prevent employees from sending sensitive customer data via personal webmail. They also want to be alerted if sensitive data is stored on a local workstation. Which solution should be deployed?
Select an answer first
2expert · hard
A government agency is decommissioning a storage array that contains classified documents. The agency's policy requires that data be destroyed to a standard that prevents any possible recovery, even with advanced forensic techniques. The storage array uses solid-state drives (SSDs). The agency also needs to maintain a chain of custody for compliance. Which method should be used?
Select an answer first
3expert · hard
A financial institution must provide a development team with a copy of the production database for testing. The database contains customer account numbers, social security numbers (SSNs), and transaction histories. The development team needs to test features that depend on the format of SSNs and the relationships between accounts and transactions. The institution wants to minimize the risk of exposing real PII. Which approach is best?
Select an answer first
4expert · hard
A company is subject to a regulation that requires retaining audit logs for 3 years. After 3 years, the logs must be securely deleted. The company's IT team is designing a log management system. Which approach best ensures compliance?
Select an answer first
5foundation · easy
Which of the following is NOT one of the three states of data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Data Security CCT Practice Questions (Page 1)

Questions 1–5

A company wants to prevent employees from sending sensitive customer data via personal webmail. They also want to be alerted if sensitive data is stored on a local workstation. Which solution should be deployed?

A company is subject to a regulation that requires retaining audit logs for 3 years. After 3 years, the logs must be securely deleted. The company's IT team is designing a log management system. Which approach best ensures compliance?

Which of the following is NOT one of the three states of data?

Keep studying — Cryptography and Data Security