Which of the following best describes data lifecycle management?

Managing data from creation to disposal, ensuring proper handling at each stage

Monitoring user activity on databases

Encrypting data at rest and in transit

Backing up data to a remote site

A company is implementing a data lifecycle management program. They need to ensure that data is retained for the required period, but also that data is disposed of promptly when no longer needed. They have a mix of structured databases and unstructured file shares. The company wants to minimize storage costs while maintaining compliance. Which approach should they take?

Manually review and delete data on a quarterly basis.

Use a DLP solution to monitor data access and block unauthorized transfers.

Retain all data indefinitely to avoid any risk of premature deletion.

Implement automated retention policies that classify data at creation, apply tiered storage based on age and sensitivity, and schedule secure deletion at end of life.

A retail company is concerned about credit card data being stored in unapproved locations, such as employee laptops and personal cloud storage. They need to discover where this data resides and then apply controls to prevent it from being moved to unauthorized locations. What should they do first?

Configure a cloud access security broker (CASB) to monitor and block uploads of credit card data to personal cloud storage.

Run a data discovery scan across endpoints, network shares, and cloud applications to identify files containing credit card numbers.

Deploy a data loss prevention (DLP) solution to block credit card data from being transferred to unauthorized locations.

Implement a data classification policy that requires all credit card data to be labeled as 'Confidential'.

Which of the following is an example of a DLP control?

Requiring multi-factor authentication for VPN access

Encrypting a database using transparent data encryption

Blocking an email that contains a social security number from being sent to an external address

Patching a vulnerability in a web server

What is the primary goal of data mobility management?

To control and monitor the movement of data across systems, networks, and geographic boundaries

To ensure data is encrypted at rest

To provide high availability for databases

To classify data based on its content

GIAC Defensible Security Architect

Domain 4Objective 2

Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 10)

Part of the Data Protection and Governance domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 46–50

46foundation · easy
Which of the following best describes data lifecycle management?
Select an answer first
47expert · hard
A company is implementing a data lifecycle management program. They need to ensure that data is retained for the required period, but also that data is disposed of promptly when no longer needed. They have a mix of structured databases and unstructured file shares. The company wants to minimize storage costs while maintaining compliance. Which approach should they take?
Select an answer first
48application · medium
A retail company is concerned about credit card data being stored in unapproved locations, such as employee laptops and personal cloud storage. They need to discover where this data resides and then apply controls to prevent it from being moved to unauthorized locations. What should they do first?
Select an answer first
49foundation · easy
Which of the following is an example of a DLP control?
Select an answer first
50foundation · easy
What is the primary goal of data mobility management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.