Data Security CND Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of data in transit?

   • AAn email message traveling from a sender to a recipient over the internet
   • BA document held in a cloud storage bucket
   • CA database record being processed by a CPU
   • DA file stored on an encrypted hard drive
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company runs a critical customer database on a virtual machine in a public cloud. The database is updated continuously. The current backup strategy is a nightly full backup stored in the same cloud region as the production VM. The compliance team now requires that backups be recoverable even if the entire region becomes unavailable. Which backup strategy modification best meets this requirement while minimizing additional storage cost?

   • AEnable versioning on the cloud storage bucket where backups are stored.
   • BCopy the nightly full backup to a different cloud region using cross-region replication.
   • CStore the backup on a local on-premises NAS device connected via a site-to-site VPN.
   • DIncrease the frequency of full backups to every 6 hours within the same region.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A financial services firm is required by its data protection policy to prevent customer credit card numbers from leaving the corporate network via email. The security team has deployed a DLP solution that inspects SMTP traffic. However, employees are now sending encrypted ZIP archives containing spreadsheets with card numbers to personal email addresses, and the DLP is not flagging them. Which additional control should be implemented to address this gap?

   • AConfigure the DLP to decrypt and inspect password-protected ZIP files by integrating with the corporate key management system.
   • BEnable TLS encryption for all SMTP communications between the corporate mail server and external recipients.
   • CRequire employees to use corporate email only for business purposes and add a warning banner to all outbound messages.
   • DBlock all outbound email attachments larger than 5 MB to reduce the risk of data exfiltration.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A global company is subject to GDPR and stores personal data of EU citizens in a cloud environment. The company also has a subsidiary in a non-EU country that needs to access this data for customer support. The data protection officer requires that the data remain in the EU. Which solution best meets both the GDPR residency requirement and the subsidiary's access need?

   • ASet up a VPN between the subsidiary and the EU cloud environment and allow direct database access.
   • BProvide the subsidiary with a remote desktop session to an EU-based virtual machine that accesses the data, without transferring the data itself.
   • CCopy the data to the subsidiary's local servers and encrypt it with a strong key.
   • DUse a secure file transfer protocol to send the data to the subsidiary on a need-to-know basis.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company needs to share a database with a third-party vendor for testing. The database contains customer PII. The company wants to minimize the risk of data exposure while still providing the vendor with realistic data. Which approach is best?

   • AEncrypt the PII fields and share the encryption key with the vendor.
   • BTokenize the PII fields and provide the vendor with a mapping table.
   • CProvide the vendor with the original data but require them to sign a non-disclosure agreement.
   • DMask the PII fields with realistic fake data and do not provide any mapping.
   Reveal Solution Discussion Select an answer first