Data Security ECSS Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is implementing a DLP solution. The company's sales team frequently sends customer quotes that include email addresses and phone numbers. The DLP policy must not block legitimate business emails, but must prevent the exfiltration of a sensitive customer list. What is the best way to configure the DLP policy?

   • ACreate a policy that detects the specific sensitive data pattern, such as a customer list with a unique identifier, and block only those emails.
   • BBlock all emails containing email addresses or phone numbers.
   • CMonitor emails but do not block any, and review logs weekly.
   • DEncrypt all outgoing emails and let the recipient decide if they are sensitive.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common method used to verify the integrity of data during transmission?

   • AChecksum
   • BAccess control lists
   • CFirewall rules
   • DData masking
   Reveal Solution Discussion Select an answer first
4. 38application · easy

   A security analyst needs to verify that a downloaded firmware file has not been tampered with during transit. The vendor provides a SHA-256 hash value on their official website. What should the analyst do to confirm the file's integrity?

   • ACheck the file size and compare it with the size listed on the website
   • BCompute the SHA-256 hash of the downloaded file and compare it with the vendor's published hash
   • COpen the file in a text editor and look for suspicious strings
   • DEncrypt the file with the vendor's public key and see if it decrypts correctly
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A retail company needs to share customer transaction data with an external analytics firm for market research. The data includes customer names, addresses, and purchase history. The analytics firm does not need to identify individual customers. What is the most appropriate technique to protect customer privacy while still providing useful data?

   • AUse a checksum to verify the data has not been altered
   • BDelete all purchase history and only share customer names and addresses
   • CEncrypt the entire dataset and provide the decryption key to the analytics firm
   • DApply data masking to replace names and addresses with pseudonyms or random values
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A healthcare organization transmits patient records between a clinic and a central hospital over the internet. The organization also stores the records on a network file server. Which combination of controls best protects the data both during transmission and while stored?

   • AUse a checksum for the transmission and rely on the file server's backup process.
   • BUse application-level encryption for the records and store them in a database with a strong password.
   • CUse a VPN for the transmission and rely on the file server's access control list.
   • DUse TLS for the transmission and full-disk encryption on the file server.
   Reveal Solution Discussion Select an answer first