Cloud Data Protection GPCS Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary goal of a backup strategy?

   • ATo ensure data availability and integrity by enabling recovery after data loss or corruption
   • BTo classify data sensitivity
   • CTo encrypt data at rest
   • DTo monitor data access
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which technique is used to obscure sensitive data in non-production environments while preserving its format and usability for testing?

   • ATokenization
   • BEncryption
   • CData masking
   • DHashing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A payment processing company needs to store credit card numbers for transaction processing, but wants to minimize the risk of exposing the actual card numbers if the database is compromised. The company also needs to perform exact-match lookups on the card numbers for fraud detection. Which technique should be used?

   • ATokenize the card numbers and store the tokens in the database, with the actual card numbers stored in a separate token vault.
   • BMask the card numbers by displaying only the last four digits in the database.
   • CHash the card numbers using a cryptographic hash function and store only the hashes.
   • DEncrypt the card numbers using a field-level encryption key and store the key in the same database.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of monitoring data access patterns?

   • ATo detect anomalies that may indicate unauthorized access or data exfiltration
   • BTo classify data sensitivity
   • CTo automatically back up data
   • DTo enforce encryption at rest
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A healthcare company stores patient data in Azure Blob Storage. They have a retention policy that requires data to be kept for 7 years and then deleted. They also have a legal hold on some data due to an ongoing investigation. The compliance officer wants to ensure that the legal hold data is not deleted after 7 years. What is the best way to handle this?

   • AApply a legal hold to the specific blobs that are part of the investigation, which overrides the retention policy.
   • BExtend the retention policy for all blobs to 10 years to cover the investigation period.
   • CDelete the legal hold data after 7 years and rely on backups for the investigation.
   • DUse a lifecycle management policy to delete the legal hold data after 7 years.
   Reveal Solution Discussion Select an answer first