What is the 3-2-1 backup rule?

Keep one copy of data, on three different media, with two copies offsite

Keep two copies of data, on three different media, with one copy offsite

Keep at least three copies of data, on two different media, with one copy offsite

Keep three copies of data, on one medium, with two copies offsite

A financial firm is decommissioning an old server that contains customer account numbers. The server's hard drives will be physically removed and the server will be repurposed. The firm's policy requires that data be permanently destroyed and not recoverable by any means. Which method should the firm use?

Perform a standard format of the drives

Delete the files and empty the recycle bin

Overwrite the drives with a single pass of zeros

A global company is subject to both GDPR and HIPAA. They store health data of EU residents in a cloud database hosted in the EU. The company also has a support team in a non-EU country that needs access to the data for troubleshooting. The company wants to maintain compliance while enabling support. Which approach best balances compliance and operational needs?

Allow the support team to access the data through a secure VPN, and rely on the EU hosting location for compliance.

Encrypt the database and share the decryption key with the support team.

Implement role-based access control and provide the support team with masked or de-identified data for troubleshooting.

Move the database to a non-EU region to simplify access for the support team.

Which of the following is a common DLP technique?

Using a VPN to encrypt remote connections

Using antivirus software to scan for malware

Content inspection to identify sensitive data patterns (e.g., credit card numbers) in emails

Using a firewall to block network traffic

EC-CouncilCertified Cybersecurity Technician

Domain 5Objective 2

Data Security CCT Practice Questions (Page 8)

Part of the Cryptography and Data Security domain, which makes up ~9% of our current practice bank.

49questions here

10free pages

10concepts

Questions 36–40

36foundation · easy
What is the 3-2-1 backup rule?
Select an answer first
37foundation · easy
Which regulation specifically addresses the protection of personal data of individuals in the European Union?
Select an answer first
38application · medium
A financial firm is decommissioning an old server that contains customer account numbers. The server's hard drives will be physically removed and the server will be repurposed. The firm's policy requires that data be permanently destroyed and not recoverable by any means. Which method should the firm use?
Select an answer first
39expert · hard
A global company is subject to both GDPR and HIPAA. They store health data of EU residents in a cloud database hosted in the EU. The company also has a support team in a non-EU country that needs access to the data for troubleshooting. The company wants to maintain compliance while enabling support. Which approach best balances compliance and operational needs?
Select an answer first
40foundation · easy
Which of the following is a common DLP technique?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Data Security CCT Practice Questions (Page 8)

Questions 36–40

What is the 3-2-1 backup rule?

Which regulation specifically addresses the protection of personal data of individuals in the European Union?

Which of the following is a common DLP technique?

Keep studying — Cryptography and Data Security