A hospital is replacing its MRI machines. The old machines contain internal hard drives that store patient images. The vendor will take the machines back for refurbishment. The hospital's policy requires that patient data be unrecoverable before the machines leave the facility. The hard drives are not self-encrypting. What should the hospital do?

Remove the hard drives and physically destroy them, then return the machines without drives.

Ask the vendor to sign a data destruction agreement and return the machines as-is.

Perform a multi-pass overwrite on the hard drives while they are still in the machines.

Degauss the hard drives and leave them in the machines.

A manufacturing company is developing an information protection program. The security team needs to identify all locations where intellectual property (e.g., CAD files, process recipes) is stored, including file servers, engineering workstations, cloud storage, and USB drives. What should the team do to accomplish this?

Deploy a data discovery tool that scans network shares, endpoints, and cloud repositories.

Review the company's data retention policy.

Ask each employee to self-report where they store CAD files.

Implement a data classification label on all CAD files.

A government agency is classifying a new database that contains citizen contact information, a public report, and internal meeting minutes. The agency's classification policy defines 'Confidential' as information whose unauthorized disclosure could cause limited harm, and 'Secret' as information whose disclosure could cause serious harm. Which classification should the citizen contact information receive?

Secret, because any disclosure of personal data is serious.

Internal, because it is not for public release.

Confidential, because unauthorized disclosure could cause limited harm to individuals.

Public, because the information is not classified as national security.

What is the purpose of secure information disposal?

To comply with data retention regulations

To free up storage space on servers

To reduce the cost of storage media

To ensure that information cannot be recovered or reconstructed after it is no longer needed

An organization is reassigning laptops from the executive team to new employees. The laptops contain confidential documents. The IT department wants to ensure that no residual data is accessible to the new users. What is the most appropriate action?

Remove the hard drives and store them in a locked cabinet

Reinstall the operating system from a recovery partition

Perform a full disk overwrite using a certified sanitization tool

Delete the user profiles and empty the recycle bin

GIAC Critical Infrastructure Protection (GCIP)

Domain 5Objective 2

Information Protection GCIP Practice Questions (Page 8)

Part of the Recovery and Information Protection domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 36–40

36expert · hard
A hospital is replacing its MRI machines. The old machines contain internal hard drives that store patient images. The vendor will take the machines back for refurbishment. The hospital's policy requires that patient data be unrecoverable before the machines leave the facility. The hard drives are not self-encrypting. What should the hospital do?
Select an answer first
37application · medium
A manufacturing company is developing an information protection program. The security team needs to identify all locations where intellectual property (e.g., CAD files, process recipes) is stored, including file servers, engineering workstations, cloud storage, and USB drives. What should the team do to accomplish this?
Select an answer first
38application · medium
A government agency is classifying a new database that contains citizen contact information, a public report, and internal meeting minutes. The agency's classification policy defines 'Confidential' as information whose unauthorized disclosure could cause limited harm, and 'Secret' as information whose disclosure could cause serious harm. Which classification should the citizen contact information receive?
Select an answer first
39foundation · easy
What is the purpose of secure information disposal?
Select an answer first
40application · medium
An organization is reassigning laptops from the executive team to new employees. The laptops contain confidential documents. The IT department wants to ensure that no residual data is accessible to the new users. What is the most appropriate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.

Information Protection GCIP Practice Questions (Page 8)

Questions 36–40

What is the purpose of secure information disposal?

An organization is reassigning laptops from the executive team to new employees. The laptops contain confidential documents. The IT department wants to ensure that no residual data is accessible to the new users. What is the most appropriate action?

Keep studying — Recovery and Information Protection