A financial services firm runs a critical trading database that must be recoverable with at most 15 minutes of data loss and a maximum downtime of 2 hours. The database changes continuously during trading hours. The backup team currently performs a full backup every Sunday at 2:00 AM and a differential backup every night at 11:00 PM. On Wednesday at 10:00 AM, the database fails. Which backup strategy change would BEST meet the stated recovery objectives?

Increase differential backup frequency to every 6 hours and keep the weekly full backup.

Perform a full backup every morning before trading opens and a differential every hour during trading.

Switch to a daily full backup at 2:00 AM and keep the existing differential backup schedule.

Add transaction log backups every 10 minutes and keep the existing full and differential backups.

What is the primary purpose of data masking in a non-production environment?

To permanently delete sensitive data from all systems

To encrypt data so that only authorized users can read it

To replace sensitive data with realistic but fictitious values

To compress data to save storage space

What is the goal of data sanitization?

To encrypt data for secure storage

To make data irrecoverable from storage media

GIAC Critical Controls Certification

Domain 4Objective 1

Data Protection GCCC Practice Questions (Page 2)

Part of the Data Protection and Recovery domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

Questions 6–10

6application · medium
A financial services firm runs a critical trading database that must be recoverable with at most 15 minutes of data loss and a maximum downtime of 2 hours. The database changes continuously during trading hours. The backup team currently performs a full backup every Sunday at 2:00 AM and a differential backup every night at 11:00 PM. On Wednesday at 10:00 AM, the database fails. Which backup strategy change would BEST meet the stated recovery objectives?
Select an answer first
7foundation · easy
What is the primary purpose of data masking in a non-production environment?
Select an answer first
8foundation · easy
Which backup strategy requires the most recent full backup plus all incremental backups since that full backup to perform a complete restore?
Select an answer first
9foundation · easy
What is the goal of data sanitization?
Select an answer first
10foundation · easy
Which method is considered secure data destruction for magnetic hard drives?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Data Protection GCCC Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of data masking in a non-production environment?

Which backup strategy requires the most recent full backup plus all incremental backups since that full backup to perform a complete restore?

What is the goal of data sanitization?

Which method is considered secure data destruction for magnetic hard drives?

Keep studying — Data Protection and Recovery