Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A company wants to prevent sensitive data from being exfiltrated via email. They have classified data into 'confidential' and 'internal' categories. They need a control that inspects outgoing email for confidential content and blocks it if it contains such data. Which control should they implement?

   • AAn email encryption solution that encrypts all outgoing messages.
   • BA DLP policy that scans email content and attachments for confidential data patterns and blocks messages that match.
   • CA firewall rule that blocks all outbound email traffic.
   • DA data classification tool that labels emails as confidential or internal.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company is implementing a data lifecycle management program. They need to ensure that data is retained only as long as required by regulations, and that when data reaches the end of its retention period, it is securely destroyed. Which combination of controls should they implement?

   • AAutomated retention policies that delete data after the required period, and a secure disposal process that verifies deletion and logs the action.
   • BA classification scheme that labels data as 'retain' or 'delete' without any enforcement.
   • CA backup system that retains all data indefinitely.
   • DA manual process where employees delete files when they think they are no longer needed.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A financial services firm is implementing a data lifecycle management program. They need to ensure that customer financial records are retained for seven years as required by regulation, and then securely disposed of. The firm also wants to automatically identify and classify new data as it is created. Which combination of controls best supports this lifecycle?

   • AImplement a data loss prevention (DLP) policy to block deletion of records before seven years.
   • BStore all data in a cold storage tier and rely on the storage provider to handle retention and disposal.
   • CUse data discovery tools to find existing records and manually delete them after seven years.
   • DDeploy data classification labels that trigger retention policies and set up automated disposal workflows after the retention period.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company is implementing a data lifecycle management program. They have a large amount of legacy data that is not classified, and they need to ensure that data is retained only as long as necessary. The company wants to minimize manual effort. What is the most effective approach?

   • AManually review all legacy data and classify it based on a spreadsheet, then apply retention policies.
   • BRun a data discovery scan to identify and classify legacy data, then apply automated retention policies based on the classification.
   • CDelete all legacy data that is older than a certain age, without classification.
   • DStore all legacy data in a cold storage tier and rely on the storage provider to manage retention.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is the primary purpose of data classification?

   • ATo assign sensitivity levels so that appropriate protections can be applied
   • BTo delete data that is no longer needed by the organization
   • CTo monitor network traffic for unauthorized data transfers
   • DTo encrypt all data regardless of its sensitivity
   Reveal Solution Discussion Select an answer first