Data Protection GCCC Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A software company provides a test environment to external contractors. The test environment contains a copy of production data, including customer names and email addresses. The company wants to allow contractors to test functionality that depends on the format of email addresses, but the contractors should not be able to read the actual email addresses. Which approach best meets this requirement?

   • AEncrypt the email addresses in the test database
   • BProvide contractors with read-only access to the test database
   • CReplace email addresses with values that match the format, such as user1234@example.com
   • DRemove the email addresses from the test database
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which cloud data protection strategy is used to protect data stored in a cloud bucket from unauthorized access?

   • APlacing the bucket in a different region
   • BUsing a public DNS name for the bucket
   • CEnabling data compression on the bucket
   • DConfiguring bucket policies and access control lists
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A company is subject to a regulation that requires retaining customer transaction records for 7 years. The company's legal team has issued a litigation hold for a specific customer's records due to an ongoing lawsuit. The records are stored in a document management system that supports retention policies and legal holds. What should the administrator do?

   • AApply a legal hold to the customer's records and set the retention policy to 7 years
   • BDisable the retention policy for the customer's records
   • CDelete the customer's records immediately to comply with the 7-year retention
   • DExtend the retention policy for all records to 10 years
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A company is designing a data lifecycle for employee records. The records are created at hire, updated during employment, and must be retained for 3 years after termination. After the retention period, the records must be destroyed. The company wants to minimize the risk of unauthorized access during the active employment stage. Which control is most important during the active stage?

   • AData masking of all employee records
   • BRole-based access control limiting access to HR staff
   • CAutomated deletion after 3 years
   • DEncryption of the records at rest
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which technique is commonly used to verify the integrity of a downloaded file?

   • AComparing its hash value to the published hash
   • BChecking the file size
   • CRenaming the file
   • DOpening the file in a text editor
   Reveal Solution Discussion Select an answer first