Data Classification and Lifecycle CSE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary criterion for assigning a data classification level to a piece of information?

   • AThe potential impact on the organization if the data is compromised
   • BThe age of the data
   • CThe storage location of the data
   • DThe size of the data file
   Reveal Solution Discussion Select an answer first
2. 27application · easy

   A software company has a public API that returns weather data. The data is freely available to anyone. The company also has internal build scripts that are not shared externally. Which classification should be applied to the weather data?

   • AInternal
   • BPublic
   • CRestricted
   • DConfidential
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A technology company uses a cloud object storage service to store customer data. The data is classified as 'Confidential' and must be encrypted at rest. The company also needs to ensure that only authorized applications can access the data, and that all access is logged. The company is considering using a shared access signature (SAS) token for application access. What is the primary security concern with using a SAS token for this purpose?

   • ASAS tokens can be shared or leaked, allowing unauthorized access to the data.
   • BSAS tokens do not provide logging of access events.
   • CSAS tokens do not support encryption at rest.
   • DSAS tokens cannot be scoped to specific IP addresses.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services firm is moving its data to the cloud. The compliance officer wants to ensure that when customer transaction records are no longer needed, they are completely removed from all storage media, including backups. Which data lifecycle stage is the compliance officer most concerned about?

   • ADestruction
   • BCreation
   • CStorage
   • DArchiving
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is implementing a data lifecycle policy in the cloud. The policy requires that data be encrypted at rest and that access to data be logged. The company also wants to ensure that data is not accidentally deleted. Which combination of controls is most appropriate for the 'storage' stage?

   • AEnable encryption and disable access logging
   • BEnable versioning and disable encryption
   • CEnable encryption, enable access logging, and enable versioning
   • DDisable encryption and enable versioning
   Reveal Solution Discussion Select an answer first