Data Security CND Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which scenario best illustrates a breach of data integrity?

   • AA distributed denial-of-service (DDoS) attack makes an online service unavailable to users
   • BA database administrator accidentally modifies a customer's account balance to an incorrect value
   • CAn attacker intercepts and reads a confidential email during transmission
   • DA backup tape is lost, and the data cannot be restored
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which security control is most appropriate for protecting data at rest on a laptop?

   • ANetwork access control (NAC)
   • BUsing TLS for network communications
   • CFull-disk encryption
   • DInput validation in applications
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A company is migrating a legacy application to a virtualized environment. The application stores sensitive data in a database. The security team wants to ensure that the data is protected at rest and that access is controlled. Which set of controls should be implemented?

   • AEnable full-disk encryption on the virtual machine's virtual disks and use role-based access control (RBAC) for the database.
   • BApply encryption only to the database backup files and use a shared admin account for the virtual machine.
   • CUse network segmentation to isolate the database and rely on the hypervisor's default security settings.
   • DStore the data in a separate virtual machine with no network access and no encryption.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A company's backup strategy uses a weekly full backup and daily incremental backups. The backups are stored on a local NAS. A ransomware attack encrypts the file server and the NAS. The company needs to recover the data. Which recovery approach is most effective?

   • APay the ransom to obtain the decryption key and decrypt the file server.
   • BRestore the most recent incremental backup only, as it contains the latest data.
   • CRestore the weekly full backup and then apply the daily incremental backups up to the point before the attack.
   • DUse the NAS's built-in snapshot feature to roll back to a point before the attack.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company's DLP system detects that an employee is about to send a file containing customer PII to a personal email address. The DLP policy is set to block the action. The employee claims they need the file to work from home. What should the administrator do?

   • AOverride the block and allow the email because the employee has a legitimate need.
   • BChange the DLP policy to only alert on personal email, not block.
   • CDisable the DLP rule for this employee to avoid disrupting their work.
   • DProvide the employee with a secure file-sharing solution that is approved by the company, and keep the DLP block in place for personal email.
   Reveal Solution Discussion Select an answer first