A company processes personal data of EU citizens and stores it in a cloud database in the EU. The company's US-based support team needs to access this data for troubleshooting. The company uses a VPN to connect from the US to the EU cloud. Which additional measure is required for GDPR compliance?

Move the data to the US to simplify access.

Implement a data processing agreement with the cloud provider and ensure a legal basis for the US team's access.

Encrypt the database at rest with customer-managed keys.

Ensure that the VPN uses strong encryption, such as AES-256.

An organization is implementing file-level encryption for a document management system. The security team wants to ensure that if one user's encryption key is compromised, the attacker cannot decrypt files belonging to other users. Which key management approach should be used?

Use a unique data encryption key (DEK) for each file, and wrap each DEK with the owner's public key.

Use the same DEK for all files in a folder and store it in the database.

Use a single master key for all files and distribute it to all users.

Encrypt each file with the user's password directly.

An organization's encryption key management policy requires that keys be rotated annually. During a rotation, the security team discovers that some data was encrypted with a key that is no longer available. What is the MOST likely cause of this issue?

The key was not properly backed up before rotation.

The key was rotated too frequently.

The key was encrypted with a master key that was also rotated.

The key was stored in a hardware security module (HSM) and could not be exported.

A company operates a hybrid cloud environment. Employees access internal applications from home via a VPN. The compliance team requires that all traffic between the VPN gateway and the internal applications be encrypted, and that the VPN terminate at the company's perimeter. Which solution meets the requirement?

Use a cloud-based VPN service that terminates in the cloud provider's network.

Use a remote-access VPN with the VPN client on the employee's laptop, terminating at the company's VPN gateway.

Use a site-to-site VPN from the employee's home router to the company's VPN gateway.

Use TLS to encrypt the application traffic and skip the VPN.

GIAC Security Leadership

Domain 4Objective 2

Managing Encryption and Privacy GSLC Practice Questions (Page 7)

Part of the Cryptography and Privacy domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 4–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 31–35

31expert · hard
A company processes personal data of EU citizens and stores it in a cloud database in the EU. The company's US-based support team needs to access this data for troubleshooting. The company uses a VPN to connect from the US to the EU cloud. Which additional measure is required for GDPR compliance?
Select an answer first
32application · medium
An organization is implementing file-level encryption for a document management system. The security team wants to ensure that if one user's encryption key is compromised, the attacker cannot decrypt files belonging to other users. Which key management approach should be used?
Select an answer first
33application · medium
An organization's encryption key management policy requires that keys be rotated annually. During a rotation, the security team discovers that some data was encrypted with a key that is no longer available. What is the MOST likely cause of this issue?
Select an answer first
34expert · hard
A company operates a hybrid cloud environment. Employees access internal applications from home via a VPN. The compliance team requires that all traffic between the VPN gateway and the internal applications be encrypted, and that the VPN terminate at the company's perimeter. Which solution meets the requirement?
Select an answer first
35application · medium
A network administrator is setting up a site-to-site VPN between two offices. The VPN must encrypt all traffic between the two sites and support dynamic routing protocols. Which protocol should the administrator choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Managing Encryption and Privacy GSLC Practice Questions (Page 7)

Questions 31–35

A company processes personal data of EU citizens and stores it in a cloud database in the EU. The company's US-based support team needs to access this data for troubleshooting. The company uses a VPN to connect from the US to the EU cloud. Which additional measure is required for GDPR compliance?

An organization is implementing file-level encryption for a document management system. The security team wants to ensure that if one user's encryption key is compromised, the attacker cannot decrypt files belonging to other users. Which key management approach should be used?

An organization's encryption key management policy requires that keys be rotated annually. During a rotation, the security team discovers that some data was encrypted with a key that is no longer available. What is the MOST likely cause of this issue?

A network administrator is setting up a site-to-site VPN between two offices. The VPN must encrypt all traffic between the two sites and support dynamic routing protocols. Which protocol should the administrator choose?

Keep studying — Cryptography and Privacy