Data Protection GCCC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company's data protection policy states that all sensitive data must remain confidential, maintain integrity, and be available to authorized users. The company is considering a cloud storage solution that offers encryption at rest and versioning. Which additional control is necessary to fully address the availability component of the CIA triad?

   • AAccess logging on the storage bucket
   • BData classification labels on the bucket
   • CEncryption in transit using TLS
   • DCross-region replication of the storage bucket
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company has a large file server with 10 TB of data. The RPO is 24 hours and the RTO is 8 hours. The backup team currently performs a full backup every Sunday and incremental backups every night. On Thursday, the server fails. The backup team estimates that restoring the full backup takes 6 hours and applying four incremental backups takes 2 hours. Which change would BEST reduce the RTO while still meeting the RPO?

   • ASwitch to a full backup every night and eliminate incremental backups.
   • BKeep the current backup strategy but increase the frequency of incremental backups to every 6 hours.
   • CSwitch to a differential backup every night and keep the weekly full backup.
   • DKeep the current backup strategy but practice restore procedures to speed up the process.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which stage of the data lifecycle involves securely deleting data that is no longer needed?

   • ADisposal
   • BUse
   • CCreation
   • DStorage
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is moving its customer data to a cloud object storage service. The data is classified as confidential. The security team wants to ensure that the data is encrypted at rest and that access is audited. The cloud provider offers server-side encryption with customer-managed keys (SSE-C) and access logging. The company also wants to maintain control over who can decrypt the data. Which combination of controls BEST meets these requirements?

   • AEnable SSE-C with keys stored in the company's own key management system, and enable bucket access logging.
   • BEnable client-side encryption before uploading and disable access logging to reduce cost.
   • CEnable server-side encryption with provider-managed keys and enable bucket access logging.
   • DEnable SSE-C and rely on the cloud provider's default monitoring without enabling access logging.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which definition best describes data protection in the context of information security?

   • ARestricting physical access to servers and storage devices
   • BEncrypting all data so that it cannot be read by anyone except the data owner
   • CCreating backups of all data to prevent any possibility of data loss
   • DEnsuring data is accessible only to authorized users and protected from unauthorized modification or destruction
   Reveal Solution Discussion Select an answer first