Data Classification and Resource Tagging GCAD Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of resource tagging in cloud environments?

   • ATo replace the need for resource naming conventions
   • BTo increase the processing speed of cloud resources
   • CTo organize and manage cloud resources by attaching metadata labels
   • DTo automatically secure resources from external threats
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is classifying its data. They have a dataset that is intended for public release but contains some internal notes. What is the most appropriate classification for this dataset?

   • AConfidential
   • BInternal
   • CRestricted
   • DPublic
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which of the following is a best practice for resource tagging?

   • AUse inconsistent tag keys across different resource types
   • BDefine a tagging taxonomy and apply it consistently
   • CUse tags to store sensitive information like passwords
   • DAvoid tagging resources that are short-lived
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company deploys a new web application in a cloud environment. The security team requires that all resources supporting the application be identifiable by their data classification level for automated policy enforcement. The operations team needs to track the cost of the application separately from other workloads. Which tagging approach best satisfies both requirements?

   • AApply a single tag named 'CostCenter' with the value 'WebApp' to all resources, and document the data classification in the resource names.
   • BApply a single tag named 'Classification' with the value 'Confidential' to all application resources, and use the cloud provider's cost analysis tool to filter by that tag.
   • CApply a tag named 'Environment' with the value 'Production' to all resources, and rely on the resource group to indicate the application and classification.
   • DApply two tags: 'DataClassification' with the value 'Confidential' and 'Application' with the value 'WebApp' to all resources supporting the application.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company has a cloud environment with resources tagged for cost allocation (e.g., 'CostCenter') and environment (e.g., 'Environment'). The security team wants to add a 'DataClassification' tag to all resources. However, the operations team is concerned that adding a new tag will break existing automation scripts that rely on the current tag schema. What is the best approach to introduce the new tag without disrupting operations?

   • ACreate a separate resource group for resources that need the new tag.
   • BDo not add the new tag; instead, use the resource name to indicate data classification.
   • CApply the 'DataClassification' tag to new resources only and gradually update existing resources over time.
   • DImmediately apply the 'DataClassification' tag to all resources and update all automation scripts at the same time.
   Reveal Solution Discussion Select an answer first