Data Security GCAD Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's cloud-based application allows users to upload documents. The compliance team requires that the application be able to prove that a specific document was not altered after it was uploaded, and that the user who uploaded it cannot deny having done so. Which combination of controls should the application implement?

   • AEncrypt each document with a symmetric key and store the key in a separate key management service.
   • BEnable versioning on the storage bucket and rely on the cloud provider's audit logs to record who uploaded each version.
   • CStore a cryptographic hash of each document in an immutable audit log, and have the application sign each upload with the user's private key.
   • DUse a checksum (e.g., CRC32) of each document and store it in the document's metadata.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is designing a data lifecycle policy for its cloud storage. The policy must ensure that data is automatically moved to cheaper storage after 30 days, archived after one year, and permanently deleted after seven years. Which cloud storage feature is designed to automate these transitions?

   • ALifecycle management policies that transition objects between storage tiers and expire them after a specified period.
   • BServer-side encryption that protects data at rest.
   • CObject versioning that keeps multiple versions of each object.
   • DAccess control lists (ACLs) that restrict who can access the data.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which stage of the data lifecycle involves ensuring that data is stored in a manner that protects it from unauthorized access and meets availability requirements?

   • ADestruction
   • BStorage
   • CCreation
   • DUse
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is designing a data lifecycle policy for its cloud storage. The policy must ensure that data is classified at creation, retained for a specific period, and then destroyed irrecoverably. Which sequence of actions best implements this policy?

   • AStore all data in a single bucket without classification, and rely on the cloud provider to delete data after a year.
   • BUse a manual process where administrators review and delete data at the end of the retention period.
   • CEncrypt all data at rest and enable versioning to keep multiple copies of each object.
   • DAutomatically tag new objects with a classification label, apply a retention policy that prevents deletion until the retention period ends, and then use a lifecycle rule to delete the objects and overwrite the storage blocks.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A multinational corporation uses a cloud-based document management system. The security team wants to enforce that only employees in the Finance department can access salary documents, and access is allowed only during business hours (9 AM to 5 PM) from the corporate network. Which access control model best meets these requirements?

   • ARole-based access control (RBAC) with a 'Finance' role and a separate policy for time-based restrictions.
   • BAttribute-based access control (ABAC) with policies that evaluate department, time of day, and network location.
   • CMandatory access control (MAC) with security labels for documents and user clearances.
   • DDiscretionary access control (DAC) where the document owner sets permissions for each user.
   Reveal Solution Discussion Select an answer first