Data Protection GCCC Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A government agency creates records that must be retained for 10 years, but some records contain personal data that must be deleted after 5 years unless a legal hold is in place. The agency currently stores all records in a single document management system with no automated retention. Which approach BEST addresses the conflicting requirements?

   • ADelete all records after 5 years to comply with the personal data requirement.
   • BStore personal data separately and delete it after 5 years, but keep all other records for 10 years without any automated process.
   • CClassify records at creation, apply a retention label that triggers deletion after 10 years, and use a separate legal hold process to preserve records that are subject to litigation.
   • DRetain all records for 10 years and ignore the 5-year deletion requirement because legal holds may be needed.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company's order management system must be restored within 2 hours of a failure, and the maximum acceptable data loss is 10 minutes. The system uses a database with synchronous replication to a standby server. The backup team proposes nightly full backups plus transaction log backups every 10 minutes. Which additional control is most important to meet the RTO?

   • AIncreasing the frequency of full backups to daily
   • BEncrypting the transaction log backups
   • CAutomated failover to the standby server
   • DStoring backups in a different geographic region
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A multinational company must retain employee tax records for 7 years per local law, but internal policy requires that records containing personally identifiable information (PII) be destroyed as soon as legally permissible. The records are stored in a cloud object storage bucket with versioning enabled. What is the most appropriate action?

   • AConfigure a lifecycle policy to delete the objects after 7 years and disable versioning
   • BDelete the objects immediately and rely on versioning to recover them if needed
   • CMove the objects to archival storage and retain them for 10 years
   • DEncrypt the objects and keep them indefinitely
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which encryption technique protects data when it is stored on a hard drive?

   • AEncryption in use
   • BEncryption at rest
   • CEncryption in transit
   • DEnd-to-end encryption
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A backup administrator is responsible for ensuring that backups are restorable. The backup software performs weekly full backups and daily incremental backups. The administrator wants to detect corruption in the backups without waiting for a disaster. Which approach is the MOST effective and efficient?

   • APerform a test restore of a random sample of files from each backup and verify their checksums against the source.
   • BReview backup logs daily for any errors or warnings.
   • CCompare the size of backup files to the source data size.
   • DStore backups on a different storage medium than the source data.
   Reveal Solution Discussion Select an answer first