Data Security GCAD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which access control model grants permissions based on the roles a user holds within an organization?

   • ADiscretionary Access Control (DAC)
   • BAttribute-Based Access Control (ABAC)
   • CRole-Based Access Control (RBAC)
   • DMandatory Access Control (MAC)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In which scenario is tokenization most appropriate?

   • AStoring credit card numbers in a production payment system while allowing transactions to be processed without exposing the original PAN
   • BProviding realistic test data for a development database
   • CAnonymizing data for public release
   • DEncrypting an entire database backup
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is moving its data to a public cloud. The company has a strict requirement that encryption keys must be stored on-premises and never leave the company's control. The cloud provider offers a key management service, but the company does not want to use it. The company needs to encrypt data at rest in the cloud. Which approach should they take?

   • AUse server-side encryption with a customer-managed key (CMK) that is generated in the cloud and stored in the cloud provider's key management service.
   • BUse server-side encryption with a provider-managed key and rely on the provider's security controls to protect the key.
   • CUse client-side encryption, where the application encrypts data before sending it to the cloud, and the encryption keys are stored in an on-premises key management system.
   • DUse a cloud HSM to generate and store the keys, and export the keys to the company's on-premises system after encryption.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A US-based company processes personal data of EU citizens and stores it in a cloud region in the United States. The company is subject to GDPR. Which measure is most directly required to comply with GDPR's data transfer rules?

   • AEncrypt all personal data in transit and at rest using strong encryption algorithms.
   • BObtain explicit consent from each data subject for the transfer.
   • CAnonymize the personal data so that it no longer identifies an individual.
   • DImplement appropriate safeguards, such as standard contractual clauses (SCCs), for the transfer of personal data to the US.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's data loss prevention (DLP) policy prohibits sending credit card numbers via email. An employee uses a web-based email client and attempts to attach a spreadsheet containing a column of credit card numbers. The DLP solution inspects the attachment and blocks the email. Which DLP technique is being used?

   • AData masking that redacts the credit card numbers before the email is sent.
   • BEndpoint DLP that monitors clipboard operations and screen captures.
   • CContent inspection and contextual analysis of the email and attachment.
   • DNetwork DLP that inspects all outbound traffic at the firewall.
   Reveal Solution Discussion Select an answer first