A company's order management system must be restored within 4 hours of a failure. The system uses a database that is backed up nightly with a full backup, and transaction logs are backed up every 15 minutes. The backup team estimates that restoring the full backup takes 3 hours and applying the transaction logs takes 1 hour. What is the PRIMARY risk to meeting the RTO?

The full backup is not recent enough, causing excessive data loss.

The transaction log backups are too frequent and will slow down the database.

The restore process takes longer than the RTO when including the time to detect the failure and initiate the restore.

The backup team has not tested the restore process, so the estimates may be inaccurate.

After restoring a database from a backup, a system administrator notices that some records appear corrupted. The backup software reported the backup as successful. What should the administrator do to detect such corruption in future backups?

Perform a checksum verification on the backup files after each backup job

Increase the frequency of full backups

Store backups in a different location

A company is migrating its customer relationship management (CRM) system to a public cloud provider. The data includes personal information of EU citizens. The compliance team requires that the data remain within the EU and that the company can verify who accesses the data. Which combination of cloud controls BEST satisfies these requirements?

Use a private cloud hosted by the company's own data center in the EU and skip cloud provider controls.

Store the data in the EU but disable logging to reduce cost.

Use a global region with encryption and rely on the cloud provider's compliance certifications.

Select an EU region for the CRM data, enable encryption at rest, and enable detailed access logging and auditing.

A spreadsheet containing employee social security numbers is classified as 'Confidential'. Which protection measure is most appropriate for this classification?

Encrypting the file and restricting access to HR personnel only

Sending the file via unencrypted email to all managers

Posting the file on the company intranet for convenience

Storing the file in a shared folder accessible to all employees

GIAC Critical Controls Certification

Domain 4Objective 1

Data Protection GCCC Practice Questions (Page 9)

Part of the Data Protection and Recovery domain, which makes up ~11% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–9 in this domain), expect 3–5 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

Questions 41–45

41application · medium
A company's order management system must be restored within 4 hours of a failure. The system uses a database that is backed up nightly with a full backup, and transaction logs are backed up every 15 minutes. The backup team estimates that restoring the full backup takes 3 hours and applying the transaction logs takes 1 hour. What is the PRIMARY risk to meeting the RTO?
Select an answer first
42application · medium
After restoring a database from a backup, a system administrator notices that some records appear corrupted. The backup software reported the backup as successful. What should the administrator do to detect such corruption in future backups?
Select an answer first
43application · medium
A company is migrating its customer relationship management (CRM) system to a public cloud provider. The data includes personal information of EU citizens. The compliance team requires that the data remain within the EU and that the company can verify who accesses the data. Which combination of cloud controls BEST satisfies these requirements?
Select an answer first
44foundation · easy
A spreadsheet containing employee social security numbers is classified as 'Confidential'. Which protection measure is most appropriate for this classification?
Select an answer first
45foundation · easy
Which backup type copies all selected data every time it runs, regardless of when files were last modified?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCCC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCCC” is a trademark of its owner, used for identification only.

Data Protection GCCC Practice Questions (Page 9)

Questions 41–45

After restoring a database from a backup, a system administrator notices that some records appear corrupted. The backup software reported the backup as successful. What should the administrator do to detect such corruption in future backups?

A spreadsheet containing employee social security numbers is classified as 'Confidential'. Which protection measure is most appropriate for this classification?

Which backup type copies all selected data every time it runs, regardless of when files were last modified?

Keep studying — Data Protection and Recovery