Data-Centric Security GDSA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company processes credit card transactions and must protect cardholder data. They currently encrypt data at rest and in transit. However, they need to perform analytics on the data without exposing the raw card numbers. Which technique should they use?

   • AUse a hardware security module (HSM) to encrypt the card numbers.
   • BFormat-preserving encryption (FPE) to keep the data in the same format for analytics.
   • CTokenization, replacing card numbers with tokens that can be used for analytics without revealing the original values.
   • DData masking to replace card numbers with random values for analytics.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is an example of a data-centric security monitoring activity?

   • AMonitoring database access logs for unusual query patterns
   • BScanning for open ports on servers
   • CReviewing firewall logs for blocked external connections
   • DReviewing user password change logs
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common technique used by DLP systems to detect sensitive data?

   • AContent inspection and contextual analysis
   • BUser authentication
   • CNetwork traffic encryption
   • DFirewall rule enforcement
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company suspects that employees are sending sensitive engineering drawings through personal webmail. The company uses a cloud-based email service and wants to detect and block the transmission of files that contain a specific watermark pattern embedded in the drawings. Which DLP approach should they use?

   • AImplement a policy that blocks all outbound email to personal webmail domains.
   • BUse a DLP solution that only checks the file extension and blocks all .dwg files.
   • CRely on the email service's built-in spam filter to detect the watermark.
   • DDeploy a DLP solution that performs content inspection on outbound email attachments and matches the watermark pattern.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services firm wants to prevent sensitive customer data from being emailed externally. They have deployed a DLP solution that scans email content. However, they discover that employees are sending sensitive data in password-protected ZIP files. What should they add to their DLP strategy?

   • AInspect the contents of password-protected ZIP files by requiring a known password or using a DLP solution that can decrypt and scan them.
   • BIncrease the sensitivity label on all documents containing customer data.
   • CEncrypt all outbound email using S/MIME.
   • DBlock all email attachments that are ZIP files.
   Reveal Solution Discussion Select an answer first