Data Security CND Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's backup administrator is designing a backup strategy for a file server that stores project documents. The documents are classified as 'confidential' and must be recoverable within 4 hours of a failure. The company has a limited backup budget. Which backup strategy is most appropriate?

   • APerform a nightly full backup and store it on a local external hard drive.
   • BPerform a monthly full backup and rely on the file server's RAID configuration for redundancy.
   • CPerform a full backup only when the documents are updated, and store it in a cloud storage bucket.
   • DPerform a weekly full backup and daily incremental backups, storing them on a network-attached storage (NAS) device.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital stores patient records in an on-premises SQL database and also replicates them to a public cloud object storage for analytics. The network team is implementing encryption. Which combination of controls best protects the data in all three states?

   • AApply Always Encrypted to sensitive columns, use SSL for the application tier, and store the cloud data in an encrypted virtual machine disk.
   • BEncrypt the backup files with BitLocker, use IPsec for database replication, and disable public access to the cloud storage bucket.
   • CUse column-level encryption in the SQL database, enforce HTTPS for web access, and rely on the cloud provider's default encryption for the object storage.
   • DEnable Transparent Data Encryption (TDE) on the SQL database, use TLS for all client connections, and enable server-side encryption with customer-managed keys on the cloud object storage.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company's DLP solution monitors outbound network traffic. The company also uses a cloud-based email service. The security team wants to ensure that sensitive data is not exfiltrated via email. Which combination of controls is most effective?

   • ADeploy a DLP agent on endpoints and integrate it with the cloud email service to scan outbound messages.
   • BUse network-based DLP only, without endpoint coverage.
   • CRely only on the cloud email service's built-in spam filter.
   • DDisable outbound email for all users to prevent data exfiltration.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A software company uses production data in its development and testing environments. The data includes customer names, addresses, and payment card numbers. The company wants to reduce the risk of data exposure while keeping the test data useful. Which control is most appropriate?

   • AEncrypt the test database with a key stored in the application's source code.
   • BUse the same production data in test environments but restrict access to the database.
   • CDisable the test environment's internet access and rely on the network firewall.
   • DUse data masking to replace sensitive values with realistic but fictional data in the test environments.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of classifying data based on sensitivity and criticality?

   • ATo determine the appropriate level of security controls and protection measures
   • BTo make data easier to search and retrieve
   • CTo reduce the amount of data stored in the organization
   • DTo comply with data retention laws automatically
   Reveal Solution Discussion Select an answer first