Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A multinational company allows employees to transfer files between regional offices using a cloud storage service. The compliance team is concerned about sensitive data crossing borders without authorization. They want to monitor and control these transfers while ensuring that data remains in approved geographic regions. Which control combination best meets these needs?

   • AUse a VPN for all transfers and assume the VPN prevents data from leaving the approved region.
   • BAllow all transfers and rely on the cloud provider's default encryption.
   • CDisable all file sharing between regional offices.
   • DImplement a DLP policy that inspects files for sensitive content and blocks transfers to unapproved regions, while using cloud storage regions that match approved data residency locations.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A healthcare organization is implementing a data governance framework. They need to ensure that patient data is classified consistently across all departments, that retention periods comply with regulations, and that disposal is approved by the appropriate authority. The organization has a decentralized structure where each department manages its own data. Which approach should they take?

   • AUse a DLP solution to enforce retention and disposal automatically.
   • BAppoint a single data owner for the entire organization.
   • CAllow each department to define its own classification and retention policies.
   • DEstablish a central data governance committee that defines classification standards, retention schedules, and disposal approval workflows, and appoints data stewards in each department.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A multinational corporation is establishing a data governance framework to manage customer data across its subsidiaries. The legal team requires that data be classified according to sensitivity, and that retention periods be enforced based on regulatory requirements. The company wants a single framework that defines roles and responsibilities for data stewardship. What should the security architect recommend?

   • ADeploy a data loss prevention (DLP) solution to monitor data movement and block unauthorized transfers.
   • BCreate a data classification policy and rely on each subsidiary to implement its own retention schedules.
   • CUse a data discovery tool to locate all customer data and then delete data older than the minimum retention period.
   • DImplement a data governance framework that assigns data owners and stewards, defines classification schema, and integrates with retention policies.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A multinational company needs to allow employees to share files with external partners, but must ensure that sensitive data is not shared with unauthorized parties. They also need to comply with data residency laws that restrict where data can be stored. Which solution should they implement?

   • AUse a cloud access security broker (CASB) to monitor and control external sharing, and apply data loss prevention (DLP) policies to block sharing of sensitive data.
   • BProvide employees with a secure file transfer protocol (SFTP) server to share files with external partners.
   • CAllow external sharing through the corporate email system and rely on encryption to protect the data.
   • DBlock all external sharing of files to eliminate the risk of data leakage.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A global company allows employees to use personal devices to access corporate data. The company must comply with data residency laws that restrict where data can be stored and processed. They also want to prevent sensitive data from being transferred to unauthorized locations. What is the most effective approach?

   • ARequire employees to use a VPN when accessing corporate data, and rely on the VPN to prevent data exfiltration.
   • BImplement a mobile device management (MDM) solution to control which devices can access corporate data, and use a cloud access security broker (CASB) to monitor and control data transfers.
   • CUse data classification labels to mark sensitive data and rely on users to avoid transferring it.
   • DBlock all access to corporate data from personal devices to eliminate the risk of data movement.
   Reveal Solution Discussion Select an answer first