Data Security ECSS Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company needs to protect data in a database that is accessed by multiple applications. The data must be encrypted at rest, but the applications need to perform searches on the data. Which approach best balances security and functionality?

   • AEncrypt the entire database with transparent data encryption (TDE) and rely on the database's built-in search functions.
   • BUse a checksum for each record to verify integrity and store the data in plaintext.
   • CEncrypt each field with a different key and store the keys in the application code.
   • DUse a VPN to protect access to the database and store the data in plaintext.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is required by law to retain financial records for seven years. After that period, the records must be destroyed. What is the best practice for disposing of the records?

   • AMove the records to an archive folder and restrict access.
   • BKeep the records indefinitely to avoid any legal issues.
   • CUse a secure data destruction method, such as cryptographic erasure or physical shredding of the storage media.
   • DDelete the files and empty the recycle bin.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A software testing team needs to use production-like data in a staging environment. The data contains personally identifiable information (PII). The team does not need the real values for testing. What is the most appropriate technique to protect the PII while keeping the data realistic?

   • ARestrict access to the staging environment to only the testing team.
   • BReplace the PII with realistic but fictitious values using data masking.
   • CEncrypt the data with a strong algorithm and store the key in the staging environment.
   • DDelete the PII fields from the database.
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A database administrator wants to ensure that a backup file has not been corrupted during the backup process. The backup software supports the use of checksums. What should the administrator enable?

   • AChecksum verification on the backup job to validate the integrity of the backup file after creation
   • BLogging on the backup job to track who performed the backup
   • CCompression on the backup job to reduce the file size
   • DEncryption on the backup job to protect the backup file from unauthorized access
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the main purpose of classifying data based on sensitivity and criticality?

   • ATo determine the appropriate level of protection and handling for the data
   • BTo ensure that data is encrypted at all times regardless of its content
   • CTo make all data available to all employees for collaboration
   • DTo reduce the amount of data stored by deleting low-value data
   Reveal Solution Discussion Select an answer first