A database administrator wants to protect sensitive columns (e.g., credit card numbers) so that only authorized applications can read them. Which encryption technique is most appropriate?

Column-level (cell-level) encryption

A university stores student records, including grades and social security numbers. The data classification policy labels grades as Confidential and social security numbers as Restricted. The IT team is implementing encryption. Which approach aligns with the classification?

Use full-disk encryption on the database server and no other encryption.

Encrypt the entire database with TDE and apply additional column-level encryption to social security numbers.

Encrypt the grades with file-level encryption and store social security numbers in a separate plaintext file.

Encrypt only the social security numbers and leave grades in plaintext.

A security architect is designing a system where a server must send a signed message to a client, and the client must be able to verify the signature without contacting the server. Which cryptographic approach should the architect use?

The server encrypts the message with its private key, and the client decrypts with the server's public key.

The server signs the message with its private key, and the client verifies with the server's public key.

The server and client share a symmetric key, and the server appends a MAC to the message.

The server encrypts the message with the client's public key, and the client decrypts with its private key.

A hospital uses an electronic health record (EHR) system. The system stores patient data in a database and also generates log files that contain patient identifiers. The hospital's policy requires encryption at rest for all data containing patient identifiers. Which approach ensures compliance?

Encrypt the database with TDE and encrypt the log files with file-level encryption.

Encrypt only the database and leave log files unencrypted because they are not part of the EHR.

Use full-disk encryption on the database server only.

Encrypt the log files but not the database because the database has access controls.

GIAC Security Leadership

Domain 4Objective 2

Managing Encryption and Privacy GSLC Practice Questions (Page 1)

Part of the Cryptography and Privacy domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 1–5

1foundation · easy
A database administrator wants to protect sensitive columns (e.g., credit card numbers) so that only authorized applications can read them. Which encryption technique is most appropriate?
Select an answer first
2application · medium
A university stores student records, including grades and social security numbers. The data classification policy labels grades as Confidential and social security numbers as Restricted. The IT team is implementing encryption. Which approach aligns with the classification?
Select an answer first
3application · medium
A security architect is designing a system where a server must send a signed message to a client, and the client must be able to verify the signature without contacting the server. Which cryptographic approach should the architect use?
Select an answer first
4application · medium
A hospital uses an electronic health record (EHR) system. The system stores patient data in a database and also generates log files that contain patient identifiers. The hospital's policy requires encryption at rest for all data containing patient identifiers. Which approach ensures compliance?
Select an answer first
5foundation · easy
A security manager needs to protect data transmitted between two branch offices over the internet. Which technology is designed to encrypt data at the network layer?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.