Design and Apply Data Security Technologies and Strategies CCSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following best describes the primary difference between symmetric and asymmetric encryption?

   • ASymmetric encryption is always faster than asymmetric encryption, but asymmetric encryption is always more secure.
   • BSymmetric encryption is used for digital signatures, while asymmetric encryption is used for data encryption.
   • CSymmetric encryption uses a single shared key for both encryption and decryption, while asymmetric encryption uses a public/private key pair.
   • DSymmetric encryption requires a certificate authority, while asymmetric encryption does not.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a key characteristic of data masking?

   • AIt is reversible, allowing the original data to be recovered
   • BIt produces a fixed-size output regardless of input length
   • CIt uses a public/private key pair to protect data
   • DIt preserves the format and characteristics of the original data
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company's web application uses TLS certificates issued by a public certificate authority (CA). The certificates are stored on each web server and are renewed manually. A recent incident showed that an expired certificate caused a service outage. The company wants to reduce the risk of human error while maintaining control over the certificate lifecycle. Which approach should the company implement?

   • AIncrease the certificate validity period to five years to reduce the frequency of renewals
   • BSwitch to self-signed certificates to eliminate the need for CA involvement
   • CStore the certificates in a secrets vault and manually copy them to servers when they expire
   • DUse a certificate management platform that automates issuance, renewal, and deployment to the web servers
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare organization needs to provide its software development and QA teams with realistic patient records for testing a new claims-processing application. The production database contains protected health information (PHI) that must not be exposed to developers. The QA team needs the data to retain its statistical distribution and referential integrity so that test results are meaningful. Which approach best satisfies these requirements?

   • ACreate a DLP policy that blocks developers from querying PHI columns in the production database
   • BEncrypt the production database and provide the QA team with the decryption key so they can access the real data
   • CExport the production data and apply deterministic data masking to PHI fields, preserving formats and relationships for testing
   • DAnonymize the production data by removing all identifying fields, leaving only non-sensitive clinical measurements
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of a digital certificate in cloud communications?

   • ATo encrypt data at rest in cloud storage
   • BTo hash data for integrity verification
   • CTo store API keys securely
   • DTo bind a public key to an identity, enabling trusted communications
   Reveal Solution Discussion Select an answer first