Data Classification and Lifecycle CSE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A multinational corporation operates in multiple countries with varying data protection regulations. The company stores employee data in a cloud environment. The data is classified as 'Confidential' and must be protected according to the strictest applicable regulation. The company is considering using a single cloud region for all data to simplify management. What is the primary risk of this approach?

   • AA single region may not provide enough storage capacity for all employee data.
   • BData stored in a single region may not meet the data residency requirements of all countries.
   • CA single region may not support the required access control mechanisms.
   • DA single region may not have the required encryption algorithms.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which data lifecycle stage is primarily concerned with moving data to a low-cost, long-term storage tier while maintaining its integrity and availability for potential future access?

   • ASharing
   • BArchiving
   • CDestruction
   • DUse
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company uses a cloud data warehouse to store customer data. The data is classified as 'Confidential' and must be encrypted at rest. The company also needs to ensure that only authorized analysts can query the data, and that all queries are logged. The company is considering using row-level security (RLS) to restrict access to specific rows of data. What is the primary benefit of RLS in this scenario?

   • ARLS automatically logs all queries.
   • BRLS provides encryption in transit.
   • CRLS encrypts the data at rest.
   • DRLS ensures that analysts can only see rows they are authorized to see, based on their role or other attributes.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a data classification policy that labels data as Public, Internal, Confidential, or Restricted. The company stores customer data in a cloud object storage service. The data is classified as 'Restricted'. The security team is configuring the lifecycle policy. Which action is most appropriate for the 'destruction' stage?

   • AEnable versioning and retention policies
   • BMove the data to a cheaper storage tier
   • CSet a lifecycle rule to delete the data after a specified period
   • DDisable access to the data
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is designing a data classification scheme for its cloud environment. The company must comply with data residency requirements that mandate personal data of EU citizens remain within the EU. The company also has a global workforce that needs access to some data. Which classification criterion should be used to determine the appropriate classification for EU personal data?

   • AThe number of users who need access
   • BThe storage cost of the data
   • CThe data's age
   • DThe data's sensitivity and regulatory requirements
   Reveal Solution Discussion Select an answer first