Data Protection GCCC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A hospital is decommissioning an old server that contains years of patient records. The server's hard drives will be physically removed and the server will be sold to a refurbisher. The hospital's policy requires that patient data be irrecoverable before the drives leave the facility. Which disposal method is the MOST appropriate?

   • ADegauss the hard drives and then physically destroy them with a shredder.
   • BOverwrite the drives with a single pass of zeros and then sell them.
   • CEncrypt the drives and then delete the encryption keys.
   • DPerform a quick format of the drives and reinstall a clean operating system.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security auditor is reviewing a company's data protection controls. The auditor wants to verify that only authorized personnel can access the customer database and that any access is recorded. Which control would BEST satisfy the auditor's request?

   • ARestrict database access to a small group of administrators.
   • BUse a firewall to limit database access to specific IP addresses.
   • CEnable database auditing that logs all SELECT, INSERT, UPDATE, and DELETE operations with the user identity and timestamp.
   • DImplement transparent data encryption (TDE) on the database.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A backup administrator notices that some restored files from last month's backup fail to open correctly. The backup software reports that the backups completed successfully. Which additional control should the administrator implement to detect this type of corruption EARLIER?

   • AEnable backup software logging and review the logs after each backup.
   • BPerform periodic test restores of random files and verify their checksums against the source system.
   • CStore backups on a different storage vendor's hardware.
   • DIncrease the frequency of full backups to daily.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which encryption category applies to data being transmitted over a network?

   • AFull disk encryption
   • BEncryption at rest
   • CEncryption in transit
   • DEncryption in use
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An e-commerce company runs its product catalog database in a single cloud region. The database is critical for order processing, and the business requires that the catalog remain available even if the entire region fails. The company has a recovery time objective (RTO) of 1 hour. Which solution BEST meets this requirement?

   • ATake daily snapshots of the database and store them in the same region.
   • BUse asynchronous replication to a different region and manually fail over when needed.
   • CConfigure synchronous replication of the database to a standby instance in a different region and implement automated failover.
   • DDeploy a second database instance in the same region and load balance reads between them.
   Reveal Solution Discussion Select an answer first