A company's sales team frequently shares large product files with clients using USB drives. The files contain pricing information that is not public. The company wants to reduce the risk of data leakage while maintaining the convenience of offline sharing. Which practice should be implemented?

Compress the files into a ZIP archive before copying to the USB drive.

Allow employees to use personal USB drives as long as they are careful.

Use unencrypted USB drives but label them 'Confidential' to remind users to handle them carefully.

Encrypt the USB drives and require a password to access the files, and keep a log of which drives are issued to which employees.

Which of the following is a data security best practice for handling sensitive data?

Using the same password for multiple accounts for convenience

Sharing passwords with colleagues to improve collaboration

Encrypting data before storing or transmitting it

Disabling firewall settings to improve network performance

A healthcare organization is implementing a data classification policy. They have patient health information (PHI), research data, and administrative data. The organization must comply with HIPAA, which requires protection of PHI. Which classification scheme is most appropriate?

Do not classify data; rely on the IT department to protect all data equally.

Classify PHI as 'Restricted', research data as 'Confidential', and administrative data as 'Internal'.

Classify PHI as 'Internal' and research data as 'Restricted'.

Classify all data as 'Restricted' to ensure maximum protection.

EC-CouncilCertified Secure Computer User

Domain 1Objective 1

Introduction to Data Security CSCU Practice Questions (Page 1)

Part of the Data and Operating System Security domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

Questions 1–5

1application · medium
A user downloads a free screensaver from an untrusted website. After installation, the user notices that files are being encrypted and a ransom note appears. What type of threat has the user encountered?
Select an answer first
2application · medium
A company's sales team frequently shares large product files with clients using USB drives. The files contain pricing information that is not public. The company wants to reduce the risk of data leakage while maintaining the convenience of offline sharing. Which practice should be implemented?
Select an answer first
3application · medium
A company's HR database contains employee social security numbers. The database administrator notices that a backup file was accidentally placed in a public cloud storage bucket. Which principle is most directly violated?
Select an answer first
4foundation · easy
Which of the following is a data security best practice for handling sensitive data?
Select an answer first
5expert · hard
A healthcare organization is implementing a data classification policy. They have patient health information (PHI), research data, and administrative data. The organization must comply with HIPAA, which requires protection of PHI. Which classification scheme is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.

Introduction to Data Security CSCU Practice Questions (Page 1)

Questions 1–5

A user downloads a free screensaver from an untrusted website. After installation, the user notices that files are being encrypted and a ransom note appears. What type of threat has the user encountered?

A company's sales team frequently shares large product files with clients using USB drives. The files contain pricing information that is not public. The company wants to reduce the risk of data leakage while maintaining the convenience of offline sharing. Which practice should be implemented?

A company's HR database contains employee social security numbers. The database administrator notices that a backup file was accidentally placed in a public cloud storage bucket. Which principle is most directly violated?

Which of the following is a data security best practice for handling sensitive data?

A healthcare organization is implementing a data classification policy. They have patient health information (PHI), research data, and administrative data. The organization must comply with HIPAA, which requires protection of PHI. Which classification scheme is most appropriate?

Keep studying — Data and Operating System Security