Which of the following is a common action a DLP system can take when it detects sensitive data being sent outside the organization?

Block the transmission and alert an administrator

Automatically delete the data from the source

Encrypt the data after it leaves

Ignore the event to avoid disruption

A retail company stores customer credit card numbers in a cloud database. The security team wants to detect and block attempts to exfiltrate this data via email or web uploads. Which control should be implemented?

Network firewalls that restrict outbound traffic to approved IP addresses only.

Database encryption with a key stored in the same cloud account.

Data loss prevention (DLP) policies that inspect outbound traffic for patterns matching credit card numbers and block or quarantine such transfers.

Audit logging that records all database queries and exports.

What is the primary purpose of encrypting sensitive data at rest in cloud storage?

To protect data from unauthorized access if the storage medium is compromised

To comply with data retention policies

Which of the following is a key component of a data inventory for sensitive data?

Data location and storage service

Which regulation specifically governs the protection of personal data of individuals in the European Union?

Health Insurance Portability and Accountability Act (HIPAA)

Federal Information Security Management Act (FISMA)

General Data Protection Regulation (GDPR)

Payment Card Industry Data Security Standard (PCI DSS)

GIAC Cloud Security Essentials

Domain 5Objective 2

Using Sensitive Data GCLD Practice Questions (Page 10)

Part of the Data Protection and Automation domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 46–50

46foundation · easy
Which of the following is a common action a DLP system can take when it detects sensitive data being sent outside the organization?
Select an answer first
47application · medium
A retail company stores customer credit card numbers in a cloud database. The security team wants to detect and block attempts to exfiltrate this data via email or web uploads. Which control should be implemented?
Select an answer first
48foundation · easy
What is the primary purpose of encrypting sensitive data at rest in cloud storage?
Select an answer first
49foundation · easy
Which of the following is a key component of a data inventory for sensitive data?
Select an answer first
50foundation · easy
Which regulation specifically governs the protection of personal data of individuals in the European Union?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCLD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCLD” is a trademark of its owner, used for identification only.