Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary role of a data governance framework?

   • ATo automatically encrypt all data stored in the cloud
   • BTo define policies, roles, and responsibilities for managing data throughout its lifecycle
   • CTo provide real-time monitoring of network traffic for intrusions
   • DTo physically secure data centers and server rooms
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is implementing DLP to prevent data exfiltration. They have classified data into 'restricted', 'confidential', and 'internal'. They need to prevent restricted data from leaving the network, but allow confidential and internal data to be shared with partners. They also need to monitor data movement across the network. Which DLP configuration should they use?

   • AOnly monitor data movement without blocking any transfers.
   • BCreate DLP policies that block outbound transfers of restricted data, allow confidential and internal data with logging, and monitor all data movement for anomalies.
   • CBlock all outbound transfers of any data.
   • DEncrypt all outbound data and allow unrestricted transfers.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A security architect is tasked with identifying where sensitive data resides across the organization. Which activity best describes data discovery?

   • AEncrypting data at rest to protect it from unauthorized access
   • BDefining who can access specific data sets within the organization
   • CScanning file shares, databases, and cloud storage to locate sensitive information
   • DAssigning a classification label to new documents based on their content
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A global company needs to store customer data in a specific country to comply with local data sovereignty laws. They also need to ensure that data is not accessed from outside that country. Which approach should they take?

   • AStore data in a neighboring country and use a VPN to access it.
   • BUse a cloud provider that offers a data center in that country, configure the service to use that region, and implement access controls that restrict access to users in that country.
   • CEncrypt the data and store it in any region.
   • DUse a DLP solution to block access to data from outside the country.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A healthcare organization is migrating patient records to a new cloud storage platform. The security team needs to identify all files containing protected health information (PHI) across both on-premises file shares and the new cloud storage, and then apply appropriate access controls. The organization uses Microsoft 365 and has Azure Information Protection (AIP) available. Which approach best meets the requirement?

   • ADeploy Microsoft Purview Data Map to scan on-premises and cloud sources, then use auto-labeling policies to classify and protect files containing PHI.
   • BEnable Azure Information Protection (AIP) unified labeling and rely on users to manually classify files before migration.
   • CUse Azure Information Protection (AIP) scanner to scan only the on-premises file shares, then manually apply labels to files in the cloud.
   • DConfigure Microsoft Purview Data Loss Prevention (DLP) policies to block all PHI from being uploaded to the cloud, preventing the need for discovery.
   Reveal Solution Discussion Select an answer first