How does encryption support compliance with data protection regulations such as GDPR?

It makes personal data anonymous so that it is no longer considered personal data

It protects personal data from unauthorized access, reducing the risk of a breach and its impact

It ensures that all personal data is stored in the same country

It eliminates the need to report data breaches to authorities

A cloud service provider offers a key management service (KMS) that allows customers to create and manage encryption keys. A security manager wants to ensure that the organization can maintain control over its keys and meet compliance requirements that mandate the ability to revoke access to data immediately. Which KMS feature is most important?

Integration with the provider's logging and monitoring services.

Use of a hardware security module (HSM) to store keys.

Customer-managed keys (CMK) with the ability to disable or schedule deletion of keys.

Automatic key rotation every 30 days.

A security analyst is investigating a potential data breach. The analyst finds that an attacker was able to substitute a malicious file in a software update repository. The repository uses SHA-1 hashes to verify file integrity. Which cryptographic weakness did the attacker likely exploit?

A man-in-the-middle attack on the repository's TLS connection.

A side-channel attack on the server's cryptographic operations.

A collision attack on SHA-1, allowing the attacker to create a malicious file with the same hash as the legitimate file.

A brute-force attack on the hash, trying all possible inputs to match the hash.

In a typical secure communication session, which combination of encryption types is commonly used to achieve both secure key exchange and efficient bulk data encryption?

Asymmetric encryption for both the key and the data

Asymmetric encryption for the data, symmetric encryption for the key

Symmetric encryption for both the key and the data

Symmetric encryption for the data, asymmetric encryption for the key

GIAC Security Leadership

Domain 4Objective 1

Cryptography Concepts for Managers GSLC Practice Questions (Page 4)

Part of the Cryptography and Privacy domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 16–20

16foundation · easy
How does encryption support compliance with data protection regulations such as GDPR?
Select an answer first
17application · medium
A cloud service provider offers a key management service (KMS) that allows customers to create and manage encryption keys. A security manager wants to ensure that the organization can maintain control over its keys and meet compliance requirements that mandate the ability to revoke access to data immediately. Which KMS feature is most important?
Select an answer first
18foundation · easy
Which cryptographic goal is achieved by using a digital signature to prove that a specific individual sent a particular message?
Select an answer first
19application · medium
A security analyst is investigating a potential data breach. The analyst finds that an attacker was able to substitute a malicious file in a software update repository. The repository uses SHA-1 hashes to verify file integrity. Which cryptographic weakness did the attacker likely exploit?
Select an answer first
20foundation · easy
In a typical secure communication session, which combination of encryption types is commonly used to achieve both secure key exchange and efficient bulk data encryption?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Cryptography Concepts for Managers GSLC Practice Questions (Page 4)

Questions 16–20

How does encryption support compliance with data protection regulations such as GDPR?

Which cryptographic goal is achieved by using a digital signature to prove that a specific individual sent a particular message?

A security analyst is investigating a potential data breach. The analyst finds that an attacker was able to substitute a malicious file in a software update repository. The repository uses SHA-1 hashes to verify file integrity. Which cryptographic weakness did the attacker likely exploit?

In a typical secure communication session, which combination of encryption types is commonly used to achieve both secure key exchange and efficient bulk data encryption?

Keep studying — Cryptography and Privacy