A security team is integrating data classification with resource tagging. They want to ensure that all resources containing 'Restricted' data are in a specific region. What is the most effective way to enforce this?

Use a monitoring tool to detect 'Restricted' resources in non-compliant regions and alert the security team.

Use a policy to deny creation of any resource in a non-compliant region.

Tag all resources with a 'DataClassification' tag and use a policy to deny creation of 'Restricted' resources in non-compliant regions.

Manually review all resources to ensure they are in the correct region.

A company has a cloud environment with resources tagged by environment ('Prod', 'Dev') and by application ('App1', 'App2'). The security team wants to add a 'DataClassification' tag, but the operations team is concerned about the cost of updating all existing resources. The company has a limited budget for this project. What is the most cost-effective approach to add the new tag?

Use a script to tag resources one by one.

Use a cloud provider's bulk tagging feature to apply the 'DataClassification' tag to all resources at once.

Do not add the tag to existing resources; only apply it to new resources.

Hire a consultant to manually tag each resource.

A company is using a tagging strategy to manage resources. They have a policy that requires all resources to have a 'CostCenter' tag. However, they are finding that some resources are being created without the tag. What is the most effective way to prevent this?

Use a monitoring tool to alert on untagged resources.

Create a ticket for the resource owner to add the tag manually.

Use a script that periodically finds and tags untagged resources.

Use a policy that denies creation of resources without the 'CostCenter' tag.

An organization is migrating to the cloud and wants to implement a tagging strategy. The CFO requires accurate cost allocation by business unit. The security team requires that all resources have a tag indicating their data classification. The operations team wants to track resources by application. What is the minimum set of tags that should be applied to every resource to meet all three requirements?

BusinessUnit, DataClassification, Application

DataClassification, Application

BusinessUnit, DataClassification

What is the primary purpose of data classification in an organization?

To assign a monetary value to data for insurance purposes

To replace the need for access control policies

To categorize data based on sensitivity and business impact so that appropriate protections can be applied

To encrypt all data automatically regardless of its content

GIAC Cloud Security Architecture and Design

Domain 3Objective 4

Data Classification and Resource Tagging GCAD Practice Questions (Page 4)

Part of the Data Protection and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 16–20

16expert · hard
A security team is integrating data classification with resource tagging. They want to ensure that all resources containing 'Restricted' data are in a specific region. What is the most effective way to enforce this?
Select an answer first
17expert · hard
A company has a cloud environment with resources tagged by environment ('Prod', 'Dev') and by application ('App1', 'App2'). The security team wants to add a 'DataClassification' tag, but the operations team is concerned about the cost of updating all existing resources. The company has a limited budget for this project. What is the most cost-effective approach to add the new tag?
Select an answer first
18expert · hard
A company is using a tagging strategy to manage resources. They have a policy that requires all resources to have a 'CostCenter' tag. However, they are finding that some resources are being created without the tag. What is the most effective way to prevent this?
Select an answer first
19application · easy
An organization is migrating to the cloud and wants to implement a tagging strategy. The CFO requires accurate cost allocation by business unit. The security team requires that all resources have a tag indicating their data classification. The operations team wants to track resources by application. What is the minimum set of tags that should be applied to every resource to meet all three requirements?
Select an answer first
20foundation · easy
What is the primary purpose of data classification in an organization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Data Classification and Resource Tagging GCAD Practice Questions (Page 4)

Questions 16–20

A security team is integrating data classification with resource tagging. They want to ensure that all resources containing 'Restricted' data are in a specific region. What is the most effective way to enforce this?

A company is using a tagging strategy to manage resources. They have a policy that requires all resources to have a 'CostCenter' tag. However, they are finding that some resources are being created without the tag. What is the most effective way to prevent this?

What is the primary purpose of data classification in an organization?

Keep studying — Data Protection and Security