Data Security CCT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An e-commerce company's database server crashed and the most recent backup is from 24 hours ago. The company lost all orders placed in the last day. To minimize data loss in future incidents, what should the company implement?

   • AUse continuous database replication to a standby server in another location.
   • BEnable file system journaling on the database server.
   • CPerform daily full backups and store them offsite.
   • DIncrease the frequency of full backups to every 12 hours.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company's database is critical to its operations. The company currently performs nightly full backups to a local tape drive. After a recent ransomware attack, the company discovered that the backups were also encrypted because the tape drive was connected to the same network. The company wants to ensure that backups are protected from similar attacks in the future. Which strategy is most effective?

   • ADisconnect the tape drive from the network and only connect it during backup operations.
   • BEncrypt the backups with a key stored on the same server.
   • CStore backups on immutable, offsite cloud storage with versioning enabled.
   • DIncrease the frequency of backups to every hour on the same tape drive.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the primary purpose of data masking?

   • ATo permanently delete sensitive data from storage
   • BTo encrypt data so it cannot be read without a key
   • CTo ensure data is backed up regularly
   • DTo hide sensitive data while maintaining its usability for testing or analysis
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A university is implementing a data security program. They have identified that student transcripts are highly sensitive, while course catalogs are public. The security team needs to allocate protection resources appropriately. Which first step should they take?

   • ADeploy a DLP solution across the network
   • BEncrypt all data in the database
   • CClassify data based on sensitivity and criticality
   • DImplement a backup strategy for all data
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A legal firm is required by regulations to retain client case files for 7 years after case closure. After that period, the files must be destroyed. The firm's IT team needs to implement a process that ensures compliance without manual intervention. Which control should be implemented?

   • AManually review and delete files every year
   • BKeep all files indefinitely to avoid accidental deletion
   • CEncrypt all files and store them on a secure server
   • DConfigure automated retention policies that delete or archive files after 7 years
   Reveal Solution Discussion Select an answer first