Data Classification and Lifecycle CSE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A legal firm stores client case files in a cloud storage service. The files are classified as 'Confidential' and must be encrypted at rest. The firm also needs to ensure that only authorized attorneys can access the files, and that any access is logged for audit purposes. Which combination of controls should be implemented?

   • AEnable server-side encryption on the storage bucket and use IAM roles to grant access only to the attorneys' group.
   • BUse a shared access key for all attorneys to access the storage bucket.
   • CApply a retention policy to prevent deletion of the files for a specified period.
   • DMake the bucket public but encrypt the files with a strong encryption algorithm.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A government contractor stores project files in a cloud storage service. The files are classified as 'Restricted' and must be encrypted in transit and at rest. The contractor also needs to ensure that only cleared personnel can access the files, and that all access is logged. Which set of controls should be implemented?

   • AUse a shared access signature (SAS) token with a long expiry to allow team members to access the files.
   • BApply a retention policy to prevent deletion of the files for a specified period.
   • CEnable encryption in transit using TLS, enable encryption at rest using server-side encryption, and use IAM policies to restrict access to specific users.
   • DStore the files in a public bucket and rely on the cloud provider's default encryption.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In cloud security, what is the primary purpose of data classification?

   • ATo encrypt all data stored in the cloud
   • BTo reduce the storage cost of data in the cloud
   • CTo automatically delete data that is no longer needed
   • DTo assign a level of sensitivity to data so that appropriate protection and handling controls can be applied
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A manufacturing company uses a cloud-based ERP system. The system stores production schedules, supplier contracts, and employee payroll data. The company wants to implement security controls based on the data lifecycle. Which control is most appropriate for the 'archiving' stage?

   • AImplement real-time replication to a secondary region for disaster recovery.
   • BUse data loss prevention (DLP) policies to prevent unauthorized sharing of sensitive data.
   • CTransition data to a lower-cost storage tier with a defined retention period.
   • DEnforce multi-factor authentication (MFA) for all users accessing the ERP system.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   How does data classification influence the archiving stage of the data lifecycle?

   • AIt determines the retention period and the level of protection required for archived data
   • BIt determines the encryption algorithm used for archived data
   • CIt requires that all archived data be made publicly accessible
   • DIt has no impact on archiving because archiving is only about cost
   Reveal Solution Discussion Select an answer first