Data Security ECSS Practice Questions (Page 11)

Questions 51–53

1. 51application · easy

   A government agency is implementing a new data handling policy. They need to ensure that data is protected according to its sensitivity, and that data with higher sensitivity receives stricter controls. Which initial step should the agency take?

   • AEncrypt all data with the same strong encryption algorithm
   • BClassify all data into categories such as public, internal, confidential, and restricted
   • CImplement a DLP solution to monitor all data transfers
   • DDefine retention periods for all data types
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company stores sensitive documents in a cloud storage service. They want to ensure that the documents are protected while stored and that only authorized users can access them. Which combination of controls should be implemented?

   • ARely on the cloud provider's physical security and disable all access logs
   • BUse client-side encryption only and share the decryption key with all employees
   • CCompress the files before uploading to reduce storage costs
   • DEnable server-side encryption for the storage service and use identity-based access policies
   Reveal Solution Discussion Select an answer first
3. 53application · medium

   A company is concerned about employees emailing sensitive customer lists to personal accounts. They want to implement a technical control that automatically blocks such emails before they leave the corporate network. Which solution should they deploy?

   • AData loss prevention (DLP) system that inspects email content and blocks messages containing sensitive data patterns
   • BEmail encryption gateway that encrypts all outbound emails
   • CAntivirus software that scans email attachments for malware
   • DNetwork firewall that blocks all outbound SMTP traffic
   Reveal Solution Discussion Select an answer first