A data governance team is creating a classification policy. They have defined four levels: Public, Internal, Confidential, and Restricted. They need to assign ownership for each data asset. What is the most important factor in assigning this ownership?

The person who created the data asset.

The security team that will protect the data.

The business unit that is accountable for the data's accuracy and use.

The person who has the most technical expertise with the data.

Which scenario best demonstrates the integration of data classification and resource tagging?

A virtual machine is tagged with 'Environment=Production' and 'CostCenter=IT'

A storage bucket is tagged with 'Project=Alpha' and 'Owner=DataTeam'

A database is tagged with 'DataClassification=Confidential' and an automated policy encrypts all databases with that tag

A network security group is tagged with 'Region=EastUS' and 'Team=Network'

A cloud administrator is implementing a tagging strategy. They want to ensure that all resources are tagged with an 'Owner' tag. What is the most effective way to enforce this?

Run a monthly script that finds untagged resources and adds an 'Owner' tag with a default value.

Create a tagging guide and ask developers to follow it.

Use a policy that denies creation of resources without the 'Owner' tag.

Use a monitoring tool to alert on untagged resources and manually assign owners.

A company is implementing a data classification program. The data owner for a customer database has classified the data as 'Confidential'. The security team wants to ensure that the classification is applied to all resources that store or process this data. What should the security team do?

Ask the data owner to identify all resources that store or process the data and apply the 'Confidential' tag to them.

Use a data discovery tool to automatically identify resources that store or process the data and apply the 'Confidential' tag.

Apply the 'Confidential' tag to all resources in the subscription.

Apply the 'Confidential' tag to all resources in the same resource group as the database.

Which tagging strategy is most effective for managing cloud costs?

Tagging resources with the name of the cloud region

Tagging resources with the current date of creation

Tagging resources with the name of the employee who created them

Tagging resources with a cost center or project identifier

GIAC Cloud Security Architecture and Design

Domain 3Objective 4

Data Classification and Resource Tagging GCAD Practice Questions (Page 3)

Part of the Data Protection and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 11–15

11application · medium
A data governance team is creating a classification policy. They have defined four levels: Public, Internal, Confidential, and Restricted. They need to assign ownership for each data asset. What is the most important factor in assigning this ownership?
Select an answer first
12foundation · easy
Which scenario best demonstrates the integration of data classification and resource tagging?
Select an answer first
13application · medium
A cloud administrator is implementing a tagging strategy. They want to ensure that all resources are tagged with an 'Owner' tag. What is the most effective way to enforce this?
Select an answer first
14application · medium
A company is implementing a data classification program. The data owner for a customer database has classified the data as 'Confidential'. The security team wants to ensure that the classification is applied to all resources that store or process this data. What should the security team do?
Select an answer first
15foundation · easy
Which tagging strategy is most effective for managing cloud costs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.