Using Sensitive Data GCLD Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software company uses production data containing personal information for testing its new application. To comply with privacy regulations, the company must ensure that testers cannot see real personal data. Which technique should be applied to the test environment?

   • AAccess control that grants testers read-only permissions on the production database.
   • BEncryption of the test database with a key stored in the same environment.
   • CNetwork segmentation that isolates the test environment from the production network.
   • DData masking that replaces real names and email addresses with fictional but realistic values.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A financial services firm uses a cloud file-sharing service to collaborate with external auditors. The compliance team is concerned about customers' credit card numbers being shared unintentionally. They want to detect and block such sharing while also keeping a record of any attempts. What should they implement?

   • AA monitoring solution that alerts when external users access any file in the sharing service.
   • BA policy that requires all external auditors to sign a confidentiality agreement before accessing the sharing service.
   • CA data classification scheme that labels all files containing financial data as 'Confidential'.
   • DA data loss prevention policy that scans shared files for credit card number patterns, blocks external sharing of matches, and logs the blocked events.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company is designing a data classification scheme for its cloud environment. They have data that includes public marketing materials, internal project plans, and customer payment card information. Which classification levels should they define to align with appropriate protection measures?

   • APublic, Internal, Confidential, and Restricted, with each level mapped to specific encryption and access control requirements.
   • BConfidential and Top Secret, with all data encrypted at rest.
   • CNo classification levels; instead, encrypt all data and rely on access control.
   • DPublic and Private, with all private data encrypted and access-controlled the same way.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of classifying data based on sensitivity levels in a cloud environment?

   • ATo eliminate the need for encryption
   • BTo determine the appropriate protection measures for each data category
   • CTo make all data publicly accessible for transparency
   • DTo reduce the total amount of data stored in the cloud
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A security team is investigating a potential data exfiltration incident. They have access logs showing that a service account downloaded a large volume of sensitive data from a cloud storage bucket. The team suspects the service account credentials may have been compromised. They need to stop the exfiltration while preserving evidence for the investigation. What should they do first?

   • AApply a data loss prevention policy to block large downloads from the bucket.
   • BChange the bucket's encryption keys and continue monitoring the service account's activity.
   • CDisable the service account entirely and delete the access logs to prevent the attacker from seeing what was logged.
   • DImmediately revoke the service account's access to the bucket and preserve the access logs in a separate, immutable storage location.
   Reveal Solution Discussion Select an answer first