Which control is essential for protecting data in a virtualized environment?

Isolating virtual machines from each other

Using the same encryption key for all VMs

Disabling all network connections between VMs

Storing VM snapshots on the same storage as the host OS

A company is implementing a data classification scheme. The company has data that is public, internal, confidential, and restricted. The security team needs to apply appropriate controls based on classification. Which control is most appropriate for 'restricted' data?

Apply the same controls as internal data to simplify management.

Encrypt the data at rest and in transit, and restrict access to a small group of authorized users.

Use only network segmentation to protect the data.

Store the data in a public cloud bucket with a signed URL for sharing.

What is the primary function of a Data Loss Prevention (DLP) solution?

To classify data based on its sensitivity

To detect and prevent unauthorized attempts to exfiltrate sensitive data

To encrypt all data stored in the organization

To back up data to a remote location

Which of the following is a common method used by DLP solutions to detect sensitive data?

Analyzing network traffic for patterns that match credit card numbers

Hashing all files on the network

Encrypting all email communications

Blocking all outbound traffic to the internet

What is the primary purpose of data masking in a non-production environment?

To reduce the storage size of the database

To encrypt the data so that it cannot be read by anyone

To make the data unusable for testing purposes

To protect sensitive data by replacing it with realistic but fictitious values

EC-CouncilCertified Network Defender

Domain 3Objective 2

Data Security CND Practice Questions (Page 6)

Part of the Application and Data Security domain, which makes up ~10% of our current practice bank.

53questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
Which control is essential for protecting data in a virtualized environment?
Select an answer first
27expert · hard
A company is implementing a data classification scheme. The company has data that is public, internal, confidential, and restricted. The security team needs to apply appropriate controls based on classification. Which control is most appropriate for 'restricted' data?
Select an answer first
28foundation · easy
What is the primary function of a Data Loss Prevention (DLP) solution?
Select an answer first
29foundation · easy
Which of the following is a common method used by DLP solutions to detect sensitive data?
Select an answer first
30foundation · easy
What is the primary purpose of data masking in a non-production environment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.