Data Security CCT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital is implementing a DLP solution. The solution must detect when patient records are being copied to a USB drive. Which DLP capability is most relevant?

   • AStorage DLP that scans databases
   • BEndpoint DLP that monitors and blocks USB device usage
   • CCloud DLP that monitors cloud applications
   • DNetwork DLP that inspects email traffic
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An e-commerce company stores order data in a database and also keeps daily backups on a local tape drive. The company's recovery point objective (RPO) is 15 minutes, and the recovery time objective (RTO) is 4 hours. The current backup schedule runs once every 24 hours. Which change should be made to meet the RPO?

   • ASwitch to a different backup software vendor
   • BUse a faster tape drive for backups
   • CIncrease backup frequency to every 15 minutes
   • DStore backups in a different physical location
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A multinational company stores personal data of EU citizens in a cloud database located in the United States. To comply with GDPR, the company must ensure that transfers of personal data outside the EU are lawful. Which action is most directly required for compliance?

   • AAnonymize all personal data before storing it in the cloud database.
   • BMove the database to a cloud region within the EU.
   • CEncrypt the database using AES-256 encryption.
   • DImplement appropriate safeguards, such as Standard Contractual Clauses (SCCs), for the data transfer.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A law firm is required by regulation to retain client case files for seven years after case closure. After that period, the files must be destroyed. The firm also wants to reduce storage costs. What is the most appropriate action?

   • ADelete case files immediately after case closure to save storage costs.
   • BAutomatically archive case files to low-cost storage for seven years, then securely delete them.
   • CKeep all case files indefinitely on high-performance storage.
   • DEncrypt the case files and store them on the same primary storage for seven years.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A software company needs to provide realistic customer data to a development team for testing a new feature. The data includes credit card numbers and email addresses. The testing environment is not subject to the same security controls as production. The company wants to maintain the data's format and usability for testing while reducing the risk of exposure. Which approach best meets these requirements?

   • ACopy the production database to the test environment and restrict access
   • BEncrypt the entire database and provide the decryption key to the development team
   • CDelete all customer records and generate synthetic data from scratch
   • DUse data masking to replace sensitive values with realistic but fictitious data
   Reveal Solution Discussion Select an answer first