A regional hospital is updating its information protection program. The IT director asks the security team to ensure that patient records stored in the EHR system, the backup tapes in the data center, and the printed discharge summaries at nurse stations are all handled according to the same sensitivity level. The team has not yet inventoried where patient data resides. What should the team do FIRST to align protection with the sensitivity of patient data?

Implement encryption on the EHR system and backup tapes, and lock the nurse station cabinets.

Ask the EHR vendor to provide a list of all data fields that contain patient identifiers.

Apply the highest classification label to all patient data across all locations.

Conduct an information identification and inventory to locate all patient data instances, then classify each instance consistently.

A company is decommissioning a data center and must dispose of 200 magnetic hard drives, 50 SSDs, and 30 LTO tapes, all containing customer data. The company's policy requires that data be unrecoverable, but the drives and tapes will be sold to a recycler. The budget is limited. Which disposal strategy best balances security, cost, and resale value?

Shred all hard drives, SSDs, and tapes in an industrial shredder.

Use cryptographic erasure on the SSDs, degauss the LTO tapes, and perform a multi-pass overwrite on the hard drives.

Degauss all magnetic media and physically destroy the SSDs.

Perform a single-pass overwrite on all hard drives and SSDs, and erase the tapes with a bulk eraser.

What is the primary basis for classifying information in a classification scheme?

The file size of the information

The sensitivity and criticality of the information to the organization

The storage medium on which the information is kept

A company is retiring 50 hard drives from a server that stored confidential customer data. The drives are still functional and will be sold to a refurbisher. The company wants to ensure the data is unrecoverable while maximizing the resale value. What should the company do?

Perform a multi-pass overwrite using a certified data sanitization tool.

Delete the data partitions and sell the drives as-is.

Degauss the drives before selling them.

Physically destroy the drives with a crusher.

Which of the following is an example of a technical safeguard for protecting classified information?

Security guards at facility entrances

Background checks for employees

Encryption of data at rest and in transit

GIAC Critical Infrastructure Protection (GCIP)

Domain 5Objective 2

Information Protection GCIP Practice Questions (Page 3)

Part of the Recovery and Information Protection domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 11–15

11application · medium
A regional hospital is updating its information protection program. The IT director asks the security team to ensure that patient records stored in the EHR system, the backup tapes in the data center, and the printed discharge summaries at nurse stations are all handled according to the same sensitivity level. The team has not yet inventoried where patient data resides. What should the team do FIRST to align protection with the sensitivity of patient data?
Select an answer first
12expert · hard
A company is decommissioning a data center and must dispose of 200 magnetic hard drives, 50 SSDs, and 30 LTO tapes, all containing customer data. The company's policy requires that data be unrecoverable, but the drives and tapes will be sold to a recycler. The budget is limited. Which disposal strategy best balances security, cost, and resale value?
Select an answer first
13foundation · easy
What is the primary basis for classifying information in a classification scheme?
Select an answer first
14application · medium
A company is retiring 50 hard drives from a server that stored confidential customer data. The drives are still functional and will be sold to a refurbisher. The company wants to ensure the data is unrecoverable while maximizing the resale value. What should the company do?
Select an answer first
15foundation · easy
Which of the following is an example of a technical safeguard for protecting classified information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.

Information Protection GCIP Practice Questions (Page 3)

Questions 11–15

What is the primary basis for classifying information in a classification scheme?

A company is retiring 50 hard drives from a server that stored confidential customer data. The drives are still functional and will be sold to a refurbisher. The company wants to ensure the data is unrecoverable while maximizing the resale value. What should the company do?

Which of the following is an example of a technical safeguard for protecting classified information?

Keep studying — Recovery and Information Protection