Introduction to Data Security CSCU Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A small business relies on a single file server for all accounting records. The owner is concerned about losing data due to a ransomware attack that encrypts files. Which combination of measures best addresses the availability and integrity of the accounting data?

   • AEncrypt the hard drive of the server to prevent unauthorized physical access.
   • BIncrease the server's storage capacity to ensure enough space for future data growth.
   • CMaintain offline, encrypted backups and test restoration procedures regularly, while also implementing access controls and anti-malware protection.
   • DPurchase a second server and replicate data in real-time to it over the network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a recommended best practice for transmitting sensitive data over the internet?

   • APost it on a public website
   • BSend it as plain text in an email
   • CUse a secure protocol such as HTTPS or SFTP
   • DCompress the data to reduce its size
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An employee notices that their computer is running slowly and unusual pop-ups appear. They suspect malware. The computer contains sensitive project documents. What is the first step the employee should take to protect the data?

   • ADelete the sensitive documents immediately to prevent them from being stolen.
   • BContinue working and hope the issue resolves itself.
   • CRun a full antivirus scan without disconnecting from the network.
   • DDisconnect the computer from the network and report the incident to the IT department.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is implementing a data handling policy for employees who work remotely. The policy must ensure that sensitive data is protected on employee devices and during transmission. Which combination of measures is most effective?

   • ARequire full-disk encryption on all employee devices and mandate the use of a VPN for all remote access.
   • BUse a cloud storage service and allow employees to access data through a web browser.
   • CRequire employees to use strong passwords and change them monthly.
   • DProhibit employees from storing any company data on their devices.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An employee receives an email that appears to be from the CEO, urgently requesting a list of all employee social security numbers. The email address looks slightly different from the CEO's actual address. Which action best protects the confidentiality of the data?

   • ASend the data as quickly as possible because the request is urgent and from the CEO.
   • BForward the email to all employees to see if anyone else received a similar request.
   • CVerify the request through a known, official communication channel before sending any data.
   • DReply to the email asking for more details to confirm the request is legitimate.
   Reveal Solution Discussion Select an answer first