Data Classification and Lifecycle CSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A startup is developing a new cloud-based application. The development team stores source code in a private repository, and the marketing team uses a public website. The CEO wants to ensure that only authorized developers can access the source code. What is the primary reason for classifying the source code as 'Internal'?

   • ATo ensure the source code is publicly available
   • BTo define the level of access control needed
   • CTo comply with regulatory requirements
   • DTo reduce storage costs
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which security control is most appropriate for the creation stage of the data lifecycle in a cloud environment?

   • AAccess revocation and account termination
   • BData classification and labeling
   • CSecure deletion and degaussing
   • DData masking and tokenization
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A multinational corporation classifies its internal product roadmap as 'Confidential'. The marketing team needs to share a summary of the roadmap with external partners. According to data classification and lifecycle principles, what should the marketing team do?

   • AReclassify the summary as 'Public' and share it
   • BCreate a sanitized summary classified as 'Public' and share it
   • CCreate a new summary document classified as 'Internal' and share it
   • DShare the original Confidential document with partners
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which data classification category typically includes information that, if disclosed, could cause serious harm to an organization, such as legal records or customer financial data?

   • APublic
   • BInternal
   • CConfidential
   • DRestricted
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a data classification policy that labels data as Public, Internal, Confidential, or Restricted. The company is about to delete a set of internal project files that are no longer needed. According to the data lifecycle, what should be done before deletion?

   • AMove the data to a cheaper storage tier
   • BReclassify the data as Public
   • CVerify that the retention period has expired
   • DEnsure that the data is backed up
   Reveal Solution Discussion Select an answer first