Using Sensitive Data GCLD Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is tasked with finding all sensitive data in a hybrid cloud environment that includes on-premises file servers and multiple cloud storage services. The team has limited budget and needs to prioritize the most critical data. Which approach should the team take?

   • AManually review file names and folder structures to identify sensitive data.
   • BRun a data discovery tool that scans all storage locations, classifies findings by sensitivity, and generates a risk-prioritized inventory.
   • CApply encryption to all storage locations without first identifying sensitive data.
   • DDisable all external access to storage services to prevent data exposure.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A cloud architect is designing a data storage solution for a healthcare provider that handles both PHI and financial data. The provider must comply with HIPAA and PCI DSS. The architect needs to ensure that the appropriate protections are applied to each data type. What should the architect do first?

   • AImplement a data loss prevention policy that blocks all external sharing of data.
   • BClassify the data into sensitivity levels (e.g., PHI, financial) and map each data type to the applicable compliance requirements.
   • CStore all data in a single cloud region to simplify compliance.
   • DEncrypt all data with the same encryption key to simplify key management.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A cloud administrator is reviewing a new object storage bucket that will be used for a marketing campaign. The bucket will contain customer email addresses, purchase history, and IP addresses. Which type of sensitive data is present in this bucket?

   • AFinancial data because purchase history includes payment amounts.
   • BProtected health information (PHI) because purchase history may include health-related products.
   • CPersonally identifiable information (PII) because email addresses and IP addresses can identify individuals.
   • DNon-sensitive data because email addresses and IP addresses are publicly available.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A multinational company has a cloud storage bucket containing HR records classified as 'Restricted'. The HR team needs to access the data, but the marketing team should not. The compliance team requires that access be granted based on job function. Which access control approach best meets these requirements?

   • AGrant all employees read access to the bucket and rely on the data classification label to deter misuse.
   • BCreate an IAM role for the HR team with read/write permissions to the bucket, and ensure no other roles have access.
   • CMake the bucket public but rely on the data being encrypted to protect it.
   • DShare the bucket access key with the HR team and ask them to keep it confidential.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational corporation is required by regulators to produce a report of all personal data it holds, including where it is stored and how it is processed. The company has data in multiple cloud providers and on-premises systems. What should the company implement to meet this requirement efficiently?

   • AA manual spreadsheet maintained by each department listing their data stores.
   • BA centralized data inventory and mapping system that integrates with all data sources and automatically updates as data moves.
   • CA data loss prevention policy that blocks all transfers of personal data.
   • DA network monitoring tool that captures all data packets containing personal data.
   Reveal Solution Discussion Select an answer first