Data-Centric Security GDSA Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A retail company must retain customer purchase records for seven years to meet tax regulations, but after that period the data must be permanently destroyed. The storage team currently keeps all backups indefinitely and has no automated process to identify which backups contain expired records. Which lifecycle management approach should they implement?

   • AMove all data older than seven years to cold storage and keep it there indefinitely.
   • BEncrypt all backups and store the encryption keys in a hardware security module (HSM) that is destroyed after seven years.
   • CApply retention labels to the data at creation, configure the storage system to enforce the seven-year retention, and then automatically delete or overwrite the data when the label expires.
   • DKeep all backups indefinitely and rely on manual review of backup contents each year to identify and delete expired records.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which control is used to protect data in transit between a web browser and a web server?

   • ATokenization
   • BTransport Layer Security (TLS)
   • CData masking
   • DAES-256 encryption at the database level
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A law firm shares a sensitive contract with an external party. The contract is protected with Azure Information Protection. The external party is using a non-Microsoft device and does not have the Azure Information Protection client installed. They are unable to open the file. What should the law firm do to allow access while maintaining protection?

   • ASend the file without protection, since the external party cannot open it.
   • BConvert the file to PDF and remove protection.
   • CProvide the external party with the decryption password.
   • DInstruct the external party to use a web-based viewer that supports Azure Information Protection, such as the Microsoft Purview portal.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is a key limitation of perimeter-based security that data-centric security addresses?

   • APerimeter controls cannot block malware from entering the network.
   • BPerimeter controls require too much manual configuration to be effective.
   • CPerimeter controls become less effective when data is shared with external parties or moves to cloud environments.
   • DPerimeter controls are too expensive to implement for most organizations.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which data protection control is specifically designed to protect data while it is being processed in memory?

   • AHomomorphic encryption
   • BTokenization
   • CTransport Layer Security (TLS)
   • DFull-disk encryption
   Reveal Solution Discussion Select an answer first