
GIAC Critical Controls Certification
Domain 4Objective 1
Data Protection GCCC Practice Questions (Page 11)
Part of the Data Protection and Recovery domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)
58questions here
12free pages
14concepts
Questions 51–55
- 51
Which technique is used to remove sensitive information from a document before it is shared externally?
Select an answer first - 52
What is the purpose of data replication?
Select an answer first - 53
In the cloud shared responsibility model, which security control is typically the customer's responsibility?
Select an answer first - 54
During which data lifecycle stage should access controls be enforced to ensure only authorized users can read or modify data?
Select an answer first - 55
Which factor should be considered when developing a data retention schedule?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.