Which of the following is a typical component of a data governance framework?

A data stewardship program that assigns ownership and accountability for data assets

A firewall rule set that blocks all outbound traffic

A VPN configuration that allows remote access to the corporate network

A backup schedule that runs nightly for all servers

Which of the following is a secure method for disposing of data on a physical hard drive?

Formatting the drive with a quick format

Deleting files and emptying the recycle bin

Moving the drive to a different server

A European company is expanding to Asia and needs to store customer data in a way that complies with local data residency laws. They also want to ensure that data is not transferred to unauthorized regions. The company uses a multi-cloud environment. What should the security architect implement?

Implement a data loss prevention (DLP) solution to block all data transfers between regions.

Deploy data residency policies in each cloud provider that restrict data storage to approved regions, and use data classification to tag data with residency requirements.

Encrypt all data and rely on encryption to satisfy data residency requirements.

Use a single cloud provider and store all data in the provider's European region to simplify compliance.

A global organization is developing a data governance framework. They need to ensure that data is managed according to legal and regulatory requirements in each country where they operate. The framework should define who is responsible for data protection and how data is handled across borders. What is the most important element to include?

Create a single global data protection policy that applies uniformly to all regions.

Implement a data loss prevention (DLP) solution to monitor data transfers between regions.

Assign data owners and stewards in each region who are responsible for ensuring compliance with local laws.

Use data discovery tools to identify all data and then store it in a central location.

GIAC Defensible Security Architect

Domain 4Objective 2

Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 3)

Part of the Data Protection and Governance domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 11–15

11foundation · easy
Which stage of the data lifecycle involves securely deleting data that is no longer needed?
Select an answer first
12foundation · easy
Which of the following is a typical component of a data governance framework?
Select an answer first
13foundation · easy
Which of the following is a secure method for disposing of data on a physical hard drive?
Select an answer first
14application · medium
A European company is expanding to Asia and needs to store customer data in a way that complies with local data residency laws. They also want to ensure that data is not transferred to unauthorized regions. The company uses a multi-cloud environment. What should the security architect implement?
Select an answer first
15application · medium
A global organization is developing a data governance framework. They need to ensure that data is managed according to legal and regulatory requirements in each country where they operate. The framework should define who is responsible for data protection and how data is handled across borders. What is the most important element to include?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 3)

Questions 11–15

Which stage of the data lifecycle involves securely deleting data that is no longer needed?

Which of the following is a typical component of a data governance framework?

Which of the following is a secure method for disposing of data on a physical hard drive?

A European company is expanding to Asia and needs to store customer data in a way that complies with local data residency laws. They also want to ensure that data is not transferred to unauthorized regions. The company uses a multi-cloud environment. What should the security architect implement?

Keep studying — Data Protection and Governance