Data Classification and Lifecycle CSE Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   A company is implementing a data lifecycle management strategy in the cloud. The company wants to ensure that data is encrypted during creation, storage, and transmission. Which stage of the data lifecycle is most directly associated with the initial generation of data?

   • AStorage
   • BUse
   • CCreation
   • DDestruction
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services company stores customer transaction data in Azure Blob Storage. The data is classified as 'Confidential' and must be retained for 7 years. After 7 years, the data must be permanently deleted. The company also needs to ensure that any access to the data is logged. Which combination of Azure features should be used?

   • AImmutable storage with a time-based retention policy of 7 years, and diagnostic settings to send logs to a Log Analytics workspace.
   • BA lifecycle management policy to delete blobs after 7 years, and Azure Monitor alerts for any access attempts.
   • CAzure Policy to enforce a 7-year retention tag on all blobs, and Azure Activity Log for access logging.
   • DA soft-delete policy with a 7-year retention period, and Azure Storage Analytics logging.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a data classification policy that defines four tiers: Public, Internal, Confidential, and Restricted. The company stores customer payment information, which is classified as Restricted. The security team is configuring the cloud storage lifecycle. Which action is most appropriate for Restricted data?

   • AAllow public read access for convenience
   • BSet the storage class to 'Archive' immediately after creation
   • CDisable all logging to reduce cost
   • DEnable versioning and retention policies
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A multinational bank operates in two regions: the EU and the US. The bank stores customer data in a cloud environment. EU customer data is classified as 'Restricted' and must remain within the EU for data residency compliance. US customer data is classified as 'Confidential' and can be stored in any US region. The bank wants to minimize cost while ensuring compliance. Which approach should the bank take?

   • AStore all data in a single US region and rely on encryption to protect EU data.
   • BUse a single storage account with geo-replication to a secondary region in the US.
   • CStore EU data in an EU region and US data in a US region, using separate storage accounts for each.
   • DStore all data in an EU region and use a content delivery network (CDN) to serve US customers.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A retail company collects customer purchase history in a cloud database. The data is classified as 'Internal' and is used for marketing analysis. The company wants to ensure that the data is accurate and available during the 'use' stage. Which control is most appropriate?

   • ASet up a lifecycle policy to archive data older than 2 years.
   • BUse data masking to hide sensitive fields from unauthorized users.
   • CImplement database auditing to track who accesses the data and when.
   • DEnable encryption at rest for the database.
   Reveal Solution Discussion Select an answer first