Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company allows employees to use personal USB drives to transfer files. The security team wants to prevent sensitive data from being copied to USB drives while still allowing non-sensitive data. Which control should they implement?

   • ADisable all USB ports on company computers.
   • BEncrypt all files on the USB drive.
   • CA DLP policy that blocks writes to USB drives when the file contains sensitive data.
   • DUse a data classification tool to label files as sensitive or non-sensitive.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A global company allows employees to access corporate data from personal devices while traveling. The security team needs to control and monitor the movement of sensitive data to ensure it does not leave the corporate network without authorization, and to comply with data residency laws in various countries. Which approach should they implement?

   • ADeploy a cloud access security broker (CASB) to monitor and control data access from personal devices, and apply data loss prevention (DLP) policies to block unauthorized transfers.
   • BUse data classification labels to mark sensitive data and rely on users to avoid transferring it.
   • CRequire all employees to use a VPN when accessing corporate data, and rely on the VPN to prevent data exfiltration.
   • DBlock all access to corporate data from personal devices to eliminate the risk of data movement.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common data classification level used by organizations?

   • APrimary, Secondary, Tertiary, Quaternary
   • BLow, Medium, High, Critical
   • CPublic, Internal, Confidential, Restricted
   • DRed, Yellow, Green, Blue
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A multinational corporation is establishing a data governance framework. They have operations in countries with conflicting data retention and privacy laws. The framework must be flexible enough to accommodate local requirements while maintaining global consistency. What is the best approach?

   • ACreate a global framework with local variations that allow each region to define specific retention and privacy policies.
   • BLet each region develop its own governance framework independently to ensure full compliance.
   • CUse a single global policy that is approved by the legal department and apply it uniformly.
   • DAdopt the strictest data retention and privacy requirements globally to ensure compliance everywhere.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial institution is establishing a data governance framework. They need to define who is responsible for classifying data, how long different types of data must be retained, and who can approve data disposal. Which governance framework component should they implement first?

   • AA data classification schema that only labels data as 'confidential' or 'public'.
   • BA data governance policy that assigns data stewards, defines classification levels, and establishes retention and disposal procedures.
   • CA retention schedule that lists all data types and their retention periods.
   • DA DLP solution that monitors data access and prevents unauthorized sharing.
   Reveal Solution Discussion Select an answer first