Data Security CND Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which key management principle is essential for maintaining the security of encrypted data?

   • ARotate encryption keys periodically and protect them with strong access controls
   • BStore encryption keys in the same location as the encrypted data for convenience
   • CUse the same encryption key for all data to simplify management
   • DShare encryption keys with all employees to ensure availability
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A global company stores personal data of EU citizens in a cloud region in the EU. The company's headquarters in the US needs to access this data for analytics. The company has implemented standard contractual clauses (SCCs) with the cloud provider. Which additional measure is most important to maintain GDPR compliance?

   • ARely solely on the SCCs and allow unrestricted access from the US.
   • BMove the data to the US to simplify access and avoid EU regulations.
   • CAnonymize the data before allowing US access, but keep the original data in the EU.
   • DConduct a data protection impact assessment (DPIA) for the transfer and implement supplementary measures such as encryption.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A healthcare organization needs to provide a third-party analytics vendor with a copy of its patient records database for algorithm testing. The vendor does not need to identify individual patients, but the analytics must preserve the statistical relationships between diagnosis codes and treatment outcomes. The database is transferred via an encrypted SFTP channel. Which approach should the security administrator choose to protect the data while meeting the vendor's analytical requirements?

   • ARedact all fields except the patient's date of birth and zip code, then transmit the file over the existing encrypted channel.
   • BReplace patient names and national IDs with randomly generated unique identifiers, while keeping diagnosis and treatment fields unchanged.
   • CEncrypt the entire database with a strong symmetric key and share the key with the vendor via a separate secure channel.
   • DApply static data masking to replace all diagnosis codes with random values while keeping patient names intact.
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the primary goal of a data backup strategy?

   • ATo reduce the storage cost of primary data
   • BTo ensure data can be restored in the event of loss, corruption, or disaster
   • CTo prevent unauthorized access to sensitive data
   • DTo comply with data retention regulations automatically
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which backup strategy involves copying only the data that has changed since the last full backup?

   • ADifferential backup
   • BFull backup
   • CMirror backup
   • DIncremental backup
   Reveal Solution Discussion Select an answer first