Introduction to Data Security CSCU Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What does the 'confidentiality' principle in data security primarily ensure?

   • AThat data is available to authorized users when needed
   • BThat data is accessible only to authorized individuals or systems
   • CThat data is stored in multiple locations for redundancy
   • DThat data is accurate and unaltered
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Why is data classification important in an organization?

   • AIt eliminates the need for encryption
   • BIt makes all data publicly accessible to promote transparency
   • CIt reduces the amount of data stored by deleting unnecessary files
   • DIt helps determine the appropriate level of protection needed for different types of data
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A university is developing a data classification policy. They have the following data types: student transcripts, research data that is not yet published, and the public course catalog. Which classification scheme is most appropriate?

   • APublic, Internal, Confidential, Restricted
   • BPersonal, Non-personal
   • CTop Secret, Secret, Confidential
   • DHigh, Medium, Low
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A financial advisor stores client portfolios on a laptop that is frequently used in public places. The advisor wants to ensure that if the laptop is stolen, the client data cannot be read. Which measure directly addresses the confidentiality of the data?

   • AUse a privacy screen filter on the laptop display.
   • BBack up the client portfolios to an external hard drive that is kept at home.
   • CInstall a tracking application on the laptop to locate it if stolen.
   • DEnable full-disk encryption on the laptop and require a strong password at startup.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A financial services firm is implementing a data loss prevention (DLP) solution. They need to prevent sensitive customer data from leaving the network via email. However, they also need to allow legitimate business emails to external auditors. Which configuration best balances security and business needs?

   • ABlock all emails containing credit card numbers or social security numbers, but allow exceptions for emails to approved external auditors.
   • BEncrypt all outbound emails and allow them to be sent.
   • CBlock all outbound email to external addresses.
   • DAllow all emails but log them for later review.
   Reveal Solution Discussion Select an answer first