A cloud architect is designing a policy to automatically prevent the creation of unencrypted storage resources. The policy must be based on the data classification of the resource. What is the most effective way to implement this?

Use a resource tag like 'DataClassification' and create a policy that denies creation of resources with a 'Confidential' or 'Restricted' tag if encryption is not enabled.

Create a policy that denies creation of any storage resource without encryption, and then add a tag to indicate compliance.

Apply a blanket policy that encrypts all storage resources regardless of classification.

Require all storage resources to have a 'Confidential' tag and deny creation if the tag is missing.

Which statement best describes the role of data classification in protecting sensitive information?

It ensures that all data is stored in the same security tier to simplify management

It eliminates the need for encryption by making data self-protecting

It provides a framework for applying security controls based on the sensitivity and importance of the data

It automatically prevents unauthorized access once labels are applied

A company uses a cloud environment with resources tagged by environment (e.g., 'Prod', 'Dev') and by data classification (e.g., 'Confidential', 'Public'). The security team wants to ensure that resources tagged as 'Confidential' in the 'Prod' environment are automatically backed up daily, while 'Public' resources in 'Dev' do not require backups. What is the most efficient way to achieve this?

Create a backup policy that applies to all resources, and exclude 'Dev' resources manually.

Create separate subscriptions for 'Prod' and 'Dev' and configure backup policies at the subscription level.

Use a policy-based approach that selects resources based on both the 'Environment' and 'DataClassification' tags and applies the appropriate backup schedule.

Manually configure backup policies for each resource based on its tags.

A data analyst is working with a dataset that contains customer names and email addresses. According to the company's classification policy, this data is considered 'Confidential'. What is the primary reason for this classification?

The data is difficult to access.

The data is subject to regulatory requirements.

The data could cause harm to individuals if disclosed.

The data is used for internal purposes only.

Why is assigning ownership an important step in the data classification process?

It establishes accountability for classifying and protecting the data

It allows the owner to access the data without restrictions

It transfers legal liability for data breaches to the owner

It ensures that the data is encrypted by the owner

GIAC Cloud Security Architecture and Design

Domain 3Objective 4

Data Classification and Resource Tagging GCAD Practice Questions (Page 1)

Part of the Data Protection and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 1–5

1application · medium
A cloud architect is designing a policy to automatically prevent the creation of unencrypted storage resources. The policy must be based on the data classification of the resource. What is the most effective way to implement this?
Select an answer first
2foundation · easy
Which statement best describes the role of data classification in protecting sensitive information?
Select an answer first
3application · medium
A company uses a cloud environment with resources tagged by environment (e.g., 'Prod', 'Dev') and by data classification (e.g., 'Confidential', 'Public'). The security team wants to ensure that resources tagged as 'Confidential' in the 'Prod' environment are automatically backed up daily, while 'Public' resources in 'Dev' do not require backups. What is the most efficient way to achieve this?
Select an answer first
4application · medium
A data analyst is working with a dataset that contains customer names and email addresses. According to the company's classification policy, this data is considered 'Confidential'. What is the primary reason for this classification?
Select an answer first
5foundation · easy
Why is assigning ownership an important step in the data classification process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.