Data-Centric Security GDSA Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Why is it important to apply data protection controls at every stage of the data lifecycle?

   • ABecause regulations only require protection during the storage phase
   • BBecause encryption is only effective during the archival phase
   • CBecause data is most vulnerable only during the creation phase
   • DBecause data can be exposed to different risks at each stage, from creation to destruction
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A legal firm shares confidential merger documents with external counsel via a secure file-sharing portal. The documents must remain unreadable to anyone who forwards them outside the approved recipient list, and the firm wants to revoke access remotely if the engagement ends early. Which technology should they use?

   • AA password-protected ZIP file with the password shared separately.
   • BA DLP policy that blocks the document from being sent outside the firm's email domain.
   • CInformation Rights Management (IRM) with policy that restricts forwarding, printing, and copying, and allows remote revocation.
   • DSecure email with S/MIME encryption and a digital signature.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A security operations center (SOC) is investigating a potential data breach. They have access logs from the database, but the logs do not include the specific data fields that were accessed, only the table names. The SOC needs to determine whether sensitive columns were exposed. Which action would best improve the forensic value of the logs?

   • AReview the application logs to see which queries were executed.
   • BInterview the users who had access to the database to determine what they accessed.
   • CUse network packet capture to reconstruct the database traffic.
   • DEnable fine-grained database auditing that logs the specific columns and rows accessed by each query.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is the primary purpose of data-centric security monitoring and auditing?

   • ATo automatically block all external access to data
   • BTo encrypt data in real-time as it is being accessed
   • CTo track data access, usage, and policy compliance to detect anomalies and breaches
   • DTo provide backup and recovery for data
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A bank's security team needs to detect insider threats by identifying users who access customer records outside of their normal working hours or from unusual locations. The bank already has a centralized logging system that captures all database access. Which additional control should they implement to enable this detection?

   • AImplement user and entity behavior analytics (UEBA) that ingests the access logs and establishes baselines for normal behavior.
   • BEnable database audit logging and store the logs in a separate, write-once storage.
   • CApply data masking to the customer records so that only masked data is visible to users.
   • DRequire all users to use a VPN when accessing the database from remote locations.
   Reveal Solution Discussion Select an answer first