Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   An organization is implementing a data classification scheme. They need to ensure that data is classified consistently across all departments and that the classification drives appropriate security controls. Which approach is most effective?

   • AAllow each department to define its own classification levels based on its specific needs.
   • BImplement a data loss prevention (DLP) solution that classifies data based on the destination of the data.
   • CDefine a centralized classification schema with clear definitions and train all employees on how to apply it.
   • DUse automated classification tools that apply labels based on content inspection, without user input.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A government agency is required to retain certain records for a minimum of 10 years, but also must ensure that records are securely disposed of after the retention period. The agency uses a mix of on-premises and cloud storage. What is the best way to enforce this requirement?

   • AStore all records in a write-once, read-many (WORM) storage to prevent alteration and deletion.
   • BApply data classification labels to records and rely on users to delete them after 10 years.
   • CUse a data discovery tool to find records older than 10 years and delete them manually.
   • DImplement a records management solution that applies retention labels to records and triggers disposal workflows after the retention period.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A global company must comply with data sovereignty laws that require customer data to be stored in a specific country. They also need to allow employees in other countries to access this data for legitimate business purposes. The company is considering using a cloud provider with data centers in multiple regions. Which approach best meets both requirements?

   • AUse a cloud region in the required country, and provide remote access via a secure VPN or dedicated connection for employees in other countries.
   • BStore data in a region close to the majority of employees and rely on encryption.
   • CUse a DLP solution to block access from employees in other countries.
   • DReplicate data to multiple regions to improve performance for global employees.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company is implementing a data lifecycle management program. They need to ensure that data is created with appropriate classification, stored securely, and disposed of when no longer needed. Which process should they establish?

   • AA backup policy that retains all data indefinitely.
   • BA lifecycle policy that defines classification at creation, storage controls based on classification, and automated disposal at end of life.
   • CA DLP policy that only monitors data access.
   • DA manual process where employees decide how to handle data on a case-by-case basis.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A European company stores customer data in a cloud provider that offers data centers in multiple regions. The company must ensure that personal data of EU residents is stored and processed only within the EU. They also need to verify that no data is being replicated to non-EU regions. Which approach should they take?

   • AConfigure the cloud service to use an EU region and disable cross-region replication, then use data discovery tools to verify that data resides only in the EU region.
   • BUse a DLP solution to block outbound transfers of personal data.
   • CStore data on-premises in the EU and assume that no data leaves the premises.
   • DUse a cloud region in the US and rely on encryption to protect the data.
   Reveal Solution Discussion Select an answer first