Cloud Data Protection GPCS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In cloud object storage, what is the purpose of a bucket policy?

   • ATo monitor access to the bucket
   • BTo replicate the bucket to another region
   • CTo encrypt the bucket contents
   • DTo define permissions for the bucket and the objects within it
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A multinational corporation must store EU citizen data in the EU to comply with GDPR data residency requirements. They use AWS and currently replicate all data to a US region for disaster recovery. The compliance team wants to maintain DR capability while ensuring EU data does not leave the EU. What is the most appropriate configuration?

   • AKeep replication to the US region but encrypt the data with a customer-managed key stored in the EU.
   • BDisable all replication and rely solely on the primary EU region for availability.
   • CUse AWS Backup to copy data to the US region but set a lifecycle policy to delete it after 30 days.
   • DConfigure cross-region replication to another EU region and disable replication to the US region.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A cloud administrator is creating a data classification policy for a new application that stores customer personal data, internal design documents, and publicly available product information. Which approach best aligns with common data classification practices?

   • ALabel data based on the storage location, with data in the cloud always classified as Confidential
   • BLabel all data as Confidential to ensure maximum protection is applied uniformly
   • CLabel data as Public, Internal, Confidential, or Restricted based on the impact of unauthorized disclosure
   • DLabel data based on the file format, with documents classified as Internal and databases as Confidential
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the principle of least privilege in the context of data access?

   • AGranting administrators full access to all data
   • BGranting access based on the user's seniority
   • CGranting all users the same level of access to simplify management
   • DGranting users only the permissions necessary to perform their job functions
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A financial services firm operates a web application on AWS behind an Application Load Balancer (ALB). Security policy requires that all client traffic be encrypted in transit, and auditors want proof that TLS termination is actually happening. The current configuration allows HTTP on port 80. What is the most direct way to enforce and verify this requirement?

   • AEnable AWS WAF on the ALB to block any request without an HTTPS header.
   • BConfigure the ALB listener to redirect HTTP (port 80) to HTTPS (port 443) and enable access logging to capture the protocol version.
   • CUse AWS Certificate Manager (ACM) to issue a certificate and attach it to the ALB, but keep HTTP enabled for health checks.
   • DRemove the HTTP listener entirely and rely on the security group to block port 80.
   Reveal Solution Discussion Select an answer first