Discovering and Storing Sensitive Data GCLD Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A media company needs to store large video files that are not sensitive but must be available for immediate streaming. The files are accessed frequently for the first month and then rarely. The company wants to minimize storage costs while maintaining low-latency access for the first month. Which storage approach should they use?

   • AStore the videos in a hot storage tier for the first month, then transition them to a cool or archive tier using a lifecycle policy.
   • BStore the videos on a virtual machine's local disk to avoid storage service costs.
   • CStore all videos in an archive storage tier from the start to minimize cost.
   • DStore all videos in a hot storage tier permanently to ensure the best performance.
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company uses a cloud email service and a cloud storage service. The security team wants to prevent sensitive data from leaving the organization via email or external sharing links. The team has classified data into 'confidential' and 'internal' categories. What should they configure?

   • ARequire multi-factor authentication for all users accessing email and storage services.
   • BCreate DLP policies that detect 'confidential' data in email and shared documents, and block external transmission or sharing.
   • CEncrypt all email and storage data with customer-managed keys.
   • DDisable external sharing for all users and require them to use a separate, approved file-sharing service.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A company must retain customer records for 10 years for legal reasons, but also must respond to customer deletion requests within 30 days. The records are stored in a cloud object storage service. The security team needs to automate both requirements. What should they implement?

   • AApply a lifecycle policy that deletes all objects after 30 days to comply with deletion requests.
   • BApply a lifecycle policy that deletes all objects after 10 years and rely on manual deletion for deletion requests.
   • CStore all records in a separate bucket with a 10-year retention policy and ignore deletion requests.
   • DUse object lock with a 10-year retention period and a separate process that identifies and deletes records subject to deletion requests.
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A security team needs to discover sensitive data across multiple cloud storage services, including object storage, databases, and file shares. The team also wants to automatically classify the data and apply DLP policies to prevent exposure. Which approach is most effective?

   • ARun separate manual scans of each storage service and document the findings in a spreadsheet.
   • BEnable encryption on all storage services and rely on encryption to prevent data exposure.
   • CUse a single DLP policy that scans all outbound traffic without first discovering or classifying the data.
   • DDeploy a cloud-native discovery service that scans all storage services, applies classification labels, and integrates with DLP policies.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company stores sensitive documents in object storage and must protect them at rest. The security team wants to use customer-managed keys to maintain control over encryption keys, but also wants to minimize operational overhead. Which approach best meets these needs?

   • AGenerate and store keys locally on a file server and reference them in the storage configuration.
   • BUse provider-managed keys and disable rotation to simplify operations.
   • CUse a cloud key management service with customer-managed keys and enable automatic rotation.
   • DUse a single static key for all encryption and rotate it manually every year.
   Reveal Solution Discussion Select an answer first