Discovering and Storing Sensitive Data GCLD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of a data retention policy in the cloud?

   • ATo define how long data must be kept to meet legal and business requirements
   • BTo reduce the cost of data storage by compressing files
   • CTo automatically encrypt all stored data
   • DTo speed up data retrieval for frequently accessed files
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of using automated discovery tools in a cloud environment?

   • ATo replace the need for manual data classification processes
   • BTo continuously identify and map the locations of sensitive data across cloud services
   • CTo automatically encrypt all data in transit between cloud services
   • DTo block unauthorized access to sensitive data in real time
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multinational company must comply with different data protection regulations in each country where it operates. The security team needs to classify data based on the regulatory requirements of each region and apply appropriate protection controls. What should they do first?

   • ACreate separate storage accounts for each country and manually label data based on the user's location.
   • BStore all data in a single region and apply the strictest regulation to all data.
   • CDefine a classification scheme that maps data types to regulatory requirements, then use automated discovery to tag data with the appropriate classification.
   • DEncrypt all data with the same key and rely on encryption to satisfy all regulatory requirements.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is data classification an important first step in protecting sensitive data in the cloud?

   • AIt eliminates the need for access controls
   • BIt determines the appropriate security controls and access policies based on the data's sensitivity
   • CIt automatically encrypts all data stored in the cloud
   • DIt reduces the cost of cloud storage by compressing data
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A healthcare organization stores patient records in an object storage bucket. Compliance requires that protected health information (PHI) be identified and tagged automatically whenever new files are uploaded. The security team wants to avoid manual review and ensure the tagging happens consistently. Which approach best meets the requirement?

   • ARequire data owners to manually classify each file at upload time using a predefined label set.
   • BCreate a bucket policy that denies access to any object without a predefined metadata tag.
   • CConfigure an automated discovery job that scans the bucket on a schedule and applies sensitivity labels based on content inspection.
   • DEnable server-side encryption on the bucket and rely on encryption as the sole classification mechanism.
   Reveal Solution Discussion Select an answer first