Data Classification and Lifecycle CSE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A research organization collects sensitive survey data from participants. The data is classified as 'Restricted' and must be stored securely, used only for analysis, and destroyed after the study concludes. The organization uses a cloud data warehouse for analysis. Which control is most important during the 'destruction' stage?

   • AEncrypt the data at rest and in transit during the analysis process.
   • BArchive the data to a long-term storage tier after the study concludes.
   • CEnsure that the data is permanently deleted from all storage and backup systems.
   • DRestrict access to the data to only the research team members.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   During the destruction stage of the data lifecycle, which control is essential to ensure that data cannot be recovered?

   • ACryptographic erasure
   • BData replication
   • CEncryption at rest
   • DAccess logging
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In the data lifecycle, which stage involves making data available to authorized users or systems for processing?

   • ADestruction
   • BCreation
   • CArchiving
   • DUse
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company stores customer data in a cloud database. The data is classified as 'Confidential'. The security team wants to ensure that the data is protected during the 'archiving' stage. Which control is most appropriate?

   • ADelete the data immediately after archiving
   • BEncrypt the archived data and restrict access
   • CUse a storage class with lower durability
   • DMake the archived data publicly accessible
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A multinational corporation is designing a data classification scheme for its cloud environment. The data includes marketing brochures, employee HR records, internal project plans, and customer payment card information. The company wants to ensure that only authorized personnel can access the most sensitive data, while allowing broad access to less sensitive data. Which classification scheme best meets this requirement?

   • AUnclassified, Classified, Secret
   • BLow, Medium, High
   • CPublic, Private, Secret, Top Secret
   • DPublic, Internal, Confidential, Restricted
   Reveal Solution Discussion Select an answer first