Introduction to Data Security CSCU Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is phishing?

   • AA type of malware that replicates itself across networks
   • BA method of encrypting data to prevent unauthorized access
   • CA technique used to trick individuals into revealing sensitive information, such as passwords or credit card numbers
   • DA process of backing up data to an external drive
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An online retailer's database was corrupted during a ransomware attack, and the backup system also failed. The company lost several days of customer orders. Which data security principle was most directly violated?

   • AConfidentiality
   • BIntegrity
   • CNon-repudiation
   • DAvailability
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A consulting firm allows employees to work remotely. They often save client contracts on their laptops and transfer files using free cloud storage services. The firm wants to ensure that client data remains confidential and is not exposed to unauthorized parties. Which practice should the firm adopt?

   • AAllow employees to use any cloud service as long as they set a strong password on their account.
   • BRequire employees to use the company-approved, encrypted file-sharing service with multi-factor authentication and disable the use of personal cloud storage for work data.
   • CInstruct employees to rename sensitive files to non-descriptive names before sharing.
   • DTell employees to compress files into ZIP archives before uploading to the free cloud service.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial analyst regularly works from home and needs to access sensitive client data. The company requires that data be protected during transmission. Which practice is most effective?

   • AUse a VPN to connect to the corporate network before accessing client data.
   • BSave the client data to a USB drive and carry it home.
   • CAccess the data through a public Wi-Fi hotspot without additional security.
   • DEmail the client data to a personal email account for easier access at home.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A marketing agency stores client contact lists, internal campaign strategies, and publicly available industry reports on the same file server. The agency wants to apply different protection levels based on the sensitivity of each data type. Which approach aligns with data classification principles?

   • AStore all data in a single folder without labels, relying on the server's default permissions.
   • BClassify client contact lists as 'Confidential', campaign strategies as 'Internal', and industry reports as 'Public', then apply access controls and encryption accordingly.
   • CEncrypt all files with the same strong encryption and give all employees full access to simplify management.
   • DMark all data as 'Confidential' to ensure maximum security across the board.
   Reveal Solution Discussion Select an answer first