Managing Encryption and Privacy GSLC Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A global e-commerce company stores customer payment information in a database. The company is subject to PCI DSS and GDPR. The security team proposes encrypting the entire database with TDE. Which additional control is necessary to meet both PCI DSS and GDPR requirements?

   • ATokenize the payment card data instead of encrypting it.
   • BImplement strong access controls and encryption key management procedures.
   • CStore the encryption keys in the same database to ensure availability.
   • DEncrypt the database backups with the same TDE key.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company stores sensitive files on a file server. The files are classified as 'Internal' and must be encrypted at rest. The company also requires that if a file is shared with an external partner, the partner can decrypt it without contacting the company's IT department. Which encryption approach should be used?

   • AFile-level encryption with a per-file key, and wrap the key with the intended recipient's public key when sharing.
   • BUse a single shared key for all files and provide it to the partner.
   • CFull-disk encryption on the file server.
   • DDatabase encryption for the file metadata only.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A healthcare organization stores patient records in an on-premises database and also sends nightly backups to a cloud storage provider. The compliance officer requires that all protected health information (PHI) be encrypted at rest in both locations, with the cloud provider unable to read the data. Which approach best meets the requirement?

   • AEnable transparent data encryption (TDE) on the database and rely on the cloud provider's default server-side encryption for backups.
   • BUse full-disk encryption on the database server and store backups in the cloud without additional encryption.
   • CEncrypt the backups with a key stored in the cloud provider's key management service and enable TDE on the database.
   • DEncrypt the database with TDE and use client-side encryption with customer-managed keys before uploading backups to the cloud.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which protocol is commonly used to encrypt web traffic between a browser and a web server?

   • ATLS (Transport Layer Security)
   • BIPsec (Internet Protocol Security)
   • CSFTP (SSH File Transfer Protocol)
   • DSSH (Secure Shell)
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's security policy requires that encryption keys be backed up and recoverable in case of a disaster. The key management team stores backups of keys in a secure offsite location. What additional measure is essential to ensure the keys can be used after recovery?

   • ADocument the key recovery procedure and test it regularly.
   • BShare the keys with all IT staff for redundancy.
   • CKeep the keys only in the primary location to avoid duplication.
   • DStore the keys in a password-protected zip file.
   Reveal Solution Discussion Select an answer first