A multinational company stores personal data of EU citizens in a cloud database located in the United States. To comply with GDPR requirements for international data transfers, what should the company do?

Ensure an appropriate transfer mechanism, such as Standard Contractual Clauses, is in place

Move all data to an EU-based cloud region

Delete all personal data of EU citizens

What is the primary purpose of classifying data in an organization?

To comply with naming conventions

To determine appropriate protection measures

To improve data retrieval speed

Which access control model is best suited for an environment with strict security labels such as 'Top Secret' and 'Confidential'?

Attribute-Based Access Control (ABAC)

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

GIAC Information Security Fundamentals

Domain 4Objective 2

Identity, Access and Data Protection GISF Practice Questions (Page 8)

Part of the Cryptography and Identity domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 36–38

36application · medium
A multinational company stores personal data of EU citizens in a cloud database located in the United States. To comply with GDPR requirements for international data transfers, what should the company do?
Select an answer first
37foundation · easy
What is the primary purpose of classifying data in an organization?
Select an answer first
38foundation · easy
Which access control model is best suited for an environment with strict security labels such as 'Top Secret' and 'Confidential'?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.