Data Classification and Lifecycle CSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization is moving to a cloud environment and wants to ensure that data is properly protected throughout its lifecycle. The security team is designing controls for the 'sharing' stage. Which control is most appropriate for sharing data with external partners?

   • AShare the storage account credentials with the partner
   • BGrant the partner full access to the storage account
   • CUse a shared access signature (SAS) with a short expiry
   • DRemove all access controls to simplify sharing
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A government agency uses a cloud storage service to store classified documents. The documents are classified as 'Restricted' and must be encrypted at rest and in transit. The agency also needs to ensure that only authorized personnel can access the documents, and that all access is logged. The agency is considering using client-side encryption to protect the documents. What is the primary advantage of client-side encryption over server-side encryption in this scenario?

   • AClient-side encryption automatically integrates with access control policies.
   • BClient-side encryption is easier to manage than server-side encryption.
   • CClient-side encryption ensures that the cloud provider cannot access the plaintext data.
   • DClient-side encryption provides stronger encryption algorithms than server-side encryption.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is data classification considered a foundational activity for cloud security?

   • AIt replaces the need for identity and access management in the cloud
   • BIt allows security controls to be matched to the sensitivity of the data
   • CIt automatically encrypts data when it is uploaded to a cloud bucket
   • DIt ensures that all data is stored in the same geographic region
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A multinational company is designing a data classification scheme for its cloud environment. The company must comply with data residency requirements that mandate personal data of EU citizens remain within the EU. The company also has a global workforce that needs access to some data. Which classification criterion should be used to determine the appropriate classification for EU personal data?

   • AThe number of users who need access
   • BThe data's age
   • CThe storage cost of the data
   • DThe data's sensitivity and regulatory requirements
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A software company uses a cloud-based document management system. Employees create project documents, store them in a shared drive, collaborate on them, and eventually archive them after project completion. The company wants to implement security controls appropriate for each lifecycle stage. Which control is most appropriate for the 'sharing' stage?

   • AUse versioning and access control lists to manage document versions during collaboration.
   • BImplement encryption at rest for all documents in the shared drive.
   • CSet up lifecycle policies to transition documents to cold storage after project completion.
   • DEnforce data loss prevention (DLP) policies that restrict sharing of documents classified as 'Confidential' to approved external domains.
   Reveal Solution Discussion Select an answer first