Which mechanism is commonly used to visually indicate the classification level of a document or email?

Watermark or header/footer label

What is the primary goal of the principle of least privilege in data access governance?

To provide the same level of access to all users for simplicity

To grant access based on the user's seniority rather than job requirements

To grant users the minimum level of access necessary to perform their job functions

To ensure that users have access to all data they might need in the future

What is the primary purpose of Data Rights Management (DRM) in the context of data-centric security?

To manage user passwords and authentication

To control access and usage of sensitive data even after it has been shared or distributed

To encrypt data only while it is stored on the organization's servers

To monitor network traffic for suspicious activity

In a cloud environment, what does the 'shared responsibility model' imply for data security?

The customer is responsible for securing the underlying infrastructure.

The customer is responsible for all security aspects in the cloud.

The cloud provider and customer share security responsibilities, with the customer typically responsible for data and access management.

The cloud provider is responsible for securing all customer data.

A financial institution needs to provide external auditors with read-only access to specific transaction records for a limited time. The auditors are not part of the organization's Azure AD. The institution must ensure that access is revoked automatically after 30 days and that all access is logged. Which approach should they take?

Create a guest user account in Azure AD for each auditor, assign read-only RBAC roles, and set an expiration date on the guest account.

Share the database credentials with the auditors and change them after 30 days.

Use Azure AD Privileged Identity Management (PIM) to grant temporary access, but only for internal users.

Export the transaction records to a CSV file and email it to the auditors.

GIAC Defensible Security Architect

Domain 4Objective 1

Data-Centric Security GDSA Practice Questions (Page 4)

Part of the Data Protection and Governance domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

10concepts

Questions 16–20

16foundation · easy
Which mechanism is commonly used to visually indicate the classification level of a document or email?
Select an answer first
17foundation · easy
What is the primary goal of the principle of least privilege in data access governance?
Select an answer first
18foundation · easy
What is the primary purpose of Data Rights Management (DRM) in the context of data-centric security?
Select an answer first
19foundation · easy
In a cloud environment, what does the 'shared responsibility model' imply for data security?
Select an answer first
20expert · hard
A financial institution needs to provide external auditors with read-only access to specific transaction records for a limited time. The auditors are not part of the organization's Azure AD. The institution must ensure that access is revoked automatically after 30 days and that all access is logged. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.