Design and Apply Data Security Technologies and Strategies CCSP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which stage of the encryption key lifecycle involves securely deleting a key and all of its backups so that data encrypted with it can no longer be decrypted?

   • ARevocation
   • BRotation
   • CDestruction
   • DGeneration
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a primary security consideration when designing a tokenization system in the cloud?

   • AEnsuring the token vault is encrypted and access-controlled
   • BStoring the token vault in the same database as the application data for performance
   • CUsing a reversible algorithm to generate tokens
   • DMaking tokens the same length as the original data
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In a digital signature scheme, what is the role of the hash of the message?

   • AIt encrypts the message to keep it confidential
   • BIt provides a public key for verification
   • CIt reduces the size of the data that the signature algorithm processes
   • DIt ensures the message is not altered during transmission
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of a data loss prevention (DLP) policy?

   • ATo manage encryption keys across the organization
   • BTo encrypt all data stored in the cloud
   • CTo ensure data is backed up regularly
   • DTo identify, monitor, and protect sensitive data from unauthorized access or exfiltration
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company uses a cloud-based file-sharing service for collaboration. The security team is concerned that employees might share files containing customer credit card numbers with external parties. The company wants to detect and block such sharing in real time. Which control should the company implement?

   • ARestrict all external sharing by disabling the file-sharing service's external sharing feature
   • BTrain employees on the company's data handling policy and require them to self-report accidental sharing
   • CDeploy a cloud DLP solution that scans files for credit card patterns and blocks external sharing when detected
   • DRequire employees to encrypt all files before uploading them to the file-sharing service
   Reveal Solution Discussion Select an answer first