Data Security CCT Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is implementing a DLP strategy. They need to prevent sensitive data from being exfiltrated via email, web uploads, and USB drives. The company has a limited budget and wants to prioritize the most effective control. Which approach should they take?

   • ADeploy storage DLP to scan databases
   • BDeploy endpoint DLP agents on all workstations and servers
   • CDeploy cloud DLP for cloud applications
   • DDeploy network DLP at the internet gateway
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary goal of Data Loss Prevention (DLP)?

   • ATo back up data regularly
   • BTo encrypt all data in the organization
   • CTo detect and prevent unauthorized access, use, or transmission of sensitive data
   • DTo classify data based on sensitivity
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company's backup strategy currently stores backups in the same building as the primary servers. A fire destroys the building, and the company loses both the primary data and the backups. Which change to the backup strategy would have prevented this loss?

   • AUse a different backup software
   • BStore backups off-site or in a different geographic location
   • CEncrypt the backups
   • DIncrease the frequency of backups
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A healthcare organization transmits patient records between its main hospital and a remote clinic over the public internet. The records are stored on a shared network drive with NTFS permissions. The security team wants to ensure that the data is protected both while stored and while being transmitted, without changing how users access the drive. Which combination of controls should be implemented?

   • AEnable BitLocker on the network drive and require users to connect via a VPN with IPsec.
   • BUse EFS to encrypt the files and rely on HTTPS for the clinic's web-based access portal.
   • CApply an NTFS deny-read permission to all users except the clinic's IT administrator.
   • DImplement a DLP solution that blocks all outbound email containing patient data.
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   A cybersecurity analyst is explaining to a new team member why data security is a foundational requirement for an organization's IT environment. Which statement accurately defines the primary goal of data security?

   • AGuaranteeing that all data is encrypted at rest and in transit to prevent any unauthorized access.
   • BPreventing all data breaches by implementing the most advanced security technologies available.
   • CStoring data in secure, physically isolated facilities to ensure it is never lost or stolen.
   • DEnsuring that data remains accessible to authorized users while protecting its confidentiality, integrity, and availability.
   Reveal Solution Discussion Select an answer first