5.1 - Understand Data Security CC Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which type of event should be logged for security purposes?

   • AOnly successful logins
   • BOnly user-initiated file downloads
   • COnly system errors
   • DSuccessful and failed login attempts
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A healthcare organization is subject to a regulation that requires retaining patient records for 6 years after the last treatment. However, a pending lawsuit requires that records related to the case be preserved until the litigation is resolved. The organization's standard retention policy would delete the records after 6 years. What should the organization do?

   • ADelete the records after 6 years as required by the standard policy.
   • BPlace a legal hold on the relevant records, suspending deletion until the litigation concludes.
   • CAnonymize the records and keep them indefinitely.
   • DEncrypt the records and store them in a separate archive.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Why is logging security events important for an organization?

   • AIt reduces the need for antivirus software.
   • BIt helps detect and investigate security incidents.
   • CIt encrypts sensitive data in storage.
   • DIt automatically prevents all cyberattacks.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key characteristic of a cryptographic hash function?

   • AIt is a one-way function producing a fixed-size digest.
   • BIt is reversible with the correct key.
   • CIt produces a variable-size output depending on input length.
   • DIt uses a public and private key pair.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which statement best describes symmetric encryption?

   • AIt uses two different keys, one for encryption and one for decryption.
   • BIt uses the same key for both encryption and decryption.
   • CIt uses a public key for encryption and a private key for decryption.
   • DIt uses a hash of the key to encrypt data.
   Reveal Solution Discussion Select an answer first