Information Protection GCIP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary goal of data sanitization before reusing storage media?

   • ATo make the media compatible with different operating systems
   • BTo extend the physical lifespan of the media
   • CTo improve the read/write speed of the media
   • DTo ensure that residual data cannot be recovered by the next user of the media
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A cloud service provider is decommissioning storage servers that contain customer data. The servers use SSDs that support the ATA Secure Erase command. The provider's contract requires that customer data be unrecoverable before the servers are returned to the hardware vendor. The provider also wants to minimize downtime. What should the provider do?

   • ARemove the SSDs, run ATA Secure Erase on each drive using a separate workstation, then return the servers without drives.
   • BPerform a quick format on each SSD and then return the servers.
   • CRun ATA Secure Erase on each SSD while the server is still running, then remove the drives.
   • DDegauss the SSDs and return the servers with the drives installed.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A defense contractor handles unclassified but sensitive engineering drawings. The security manager wants to ensure that only authorized employees can access the drawings on the file server, that access is logged, and that printed copies are kept in a locked room. Which combination of safeguards best meets these requirements?

   • AA strong password policy and a firewall rule that blocks external access to the file server.
   • BNTFS permissions, audit logging on the file server, and a badge-controlled door to the print room.
   • CFull-disk encryption on all employee laptops and a clean-desk policy.
   • DA data loss prevention (DLP) system that blocks emailing of drawings and a security camera in the hallway.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A manufacturing company is starting an information protection program. The first step is to identify what information exists and where it resides. Which activity should be performed first?

   • ADevelop a disposal schedule
   • BConduct an information asset inventory
   • CImplement encryption tools
   • DDefine classification labels
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A law firm stores client case files in a cloud document management system. The system supports role-based access control, encryption at rest, and audit logging. The firm's policy requires that only attorneys working on a case can access its files. What should the firm configure to enforce this requirement?

   • AEnable audit logging to track who accesses each case file.
   • BEnable encryption at rest on the document management system.
   • CCreate a shared folder for each case and grant access only to the assigned attorneys.
   • DAsk the cloud provider to isolate the firm's data in a dedicated database.
   Reveal Solution Discussion Select an answer first