Data Security ECSS Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which technique is commonly used in data masking to replace sensitive values with realistic but fictitious ones?

   • ACompression
   • BSubstitution
   • CRedundancy
   • DEncryption with a public key
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company's backup strategy uses a 3-2-1 rule: three copies of data, on two different media, with one copy offsite. The company is considering moving to a cloud-based backup service. The compliance team requires that backups be encrypted and that the backup data be verifiable for integrity. Which additional consideration is critical for the cloud backup strategy?

   • AUse the cloud provider's default backup settings without modification
   • BChoose a cloud provider that offers unlimited storage at the lowest cost
   • CEnsure the cloud backup service supports client-side encryption and provides checksum verification for each backup
   • DStore backups in the same region as the primary data to reduce latency
   Reveal Solution Discussion Select an answer first
4. 28application · easy

   A company's security policy requires that only members of the Finance team can access the financial reporting folder. The folder is stored on a network share. Which access control method should be used to enforce this policy?

   • AUse a shared password for the folder and share it with the finance team
   • BCreate a Finance group in Active Directory, add the finance team members to it, and assign the group read/write permissions to the folder
   • CAssign individual permissions to each finance team member's user account
   • DSet the folder to inherit permissions from the parent folder
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of data security in an organization?

   • ATo protect information assets from unauthorized access, use, disclosure, disruption, modification, or destruction
   • BTo reduce the cost of data storage by compressing all data
   • CTo ensure that data is accessible to all employees at all times
   • DTo ensure that data is permanently deleted after a set period
   Reveal Solution Discussion Select an answer first
6. 30application · easy

   An organization wants to prevent sensitive data from being copied to USB drives by employees. They have implemented a DLP solution. What additional control should be implemented to enforce this policy?

   • AIncrease the logging of all file access events
   • BEncrypt all files on the workstations
   • CTrain employees on the importance of data security
   • DDisable USB ports on workstations using group policy or endpoint management software
   Reveal Solution Discussion Select an answer first