Data Security CND Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is implementing a data classification policy and needs to decide how to handle data that is no longer actively used but must be retained for legal reasons. The data is stored on a file server and is classified as 'confidential'. The security team must ensure that the data is not accidentally modified or deleted, but it must be available for e-discovery if needed. Which approach is most appropriate?

   • AEncrypt the data and store the encryption key with the IT department, but leave the data in its original location.
   • BDelete the data from the file server and restore it from backup only when needed for e-discovery.
   • CMove the data to a separate archive share with read-only permissions for most users, and grant write access only to the legal team.
   • DCompress the data and store it on the same file server with a password-protected archive.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A financial firm is building a test environment for a new application. The test data must be realistic but must not expose real customer personally identifiable information (PII). The firm also needs to track which test records correspond to which real customers for debugging. Which approach should the data team use?

   • ATokenize the PII fields, storing the mapping in a secure vault accessible only to the debugging team.
   • BGenerate synthetic data that mimics the statistical distribution of the original data.
   • CMask the PII fields with random characters and discard the original values.
   • DEncrypt the PII fields with a key stored in the application's configuration file.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of encrypting data at rest?

   • ATo ensure data is not modified during storage
   • BTo reduce the storage space required for data
   • CTo protect the confidentiality of data stored on a medium
   • DTo speed up data retrieval from storage
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company's DLP solution flags a large outbound email containing a spreadsheet with customer credit card numbers. The email is from the finance department to an external auditor. The DLP policy currently blocks all such emails. What should the administrator do to balance security and business needs?

   • ACreate a policy exception for the finance department and allow the email to go through.
   • BDisable the DLP rule for outbound email to avoid blocking legitimate communications.
   • CChange the DLP policy to only alert, not block, all outbound emails containing credit card numbers.
   • DRequire the sender to encrypt the email and attach a business justification, then allow the email after manager approval.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A multinational company stores European customer data in a cloud region located in the EU. The company's support team in the United States needs to access this data for troubleshooting. Which practice best supports GDPR compliance?

   • AAllow the US support team to access the data directly from the EU region without any additional controls.
   • BMove the data to a US region to simplify access for the support team.
   • CAnonymize the data so that it no longer identifies individuals, then allow unrestricted access.
   • DEnsure the cloud provider has EU-approved standard contractual clauses (SCCs) in place for the data transfer, and restrict access to authorized personnel.
   Reveal Solution Discussion Select an answer first