Implement Data Discovery CCSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A government agency receives emails with attachments that are a mix of PDF and JSON files. The agency needs to discover which emails contain sensitive data like social security numbers. What is the most effective discovery approach?

   • AManually review each email and attachment to identify sensitive data.
   • BUse an email archiving solution that can index email content and attachments, and then run content searches for patterns like social security numbers.
   • COnly scan the JSON attachments because PDFs are not searchable.
   • DSearch the email subject lines for keywords like 'confidential'.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a cloud-based SQL database that is part of a multi-tier application. The database contains customer records. The company needs to discover which tables contain data that is subject to a new data sovereignty law. What is the first step?

   • AReview the application code to see which tables are accessed by the user interface.
   • BCheck the database backup schedule to see which tables are backed up.
   • CIdentify the columns in the database schema that contain customer data, such as name, address, and national ID.
   • DAsk the database administrator to provide a list of all tables in the database.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company stores employee HR records as unstructured text files in a cloud storage bucket. The bucket is replicated to another region for disaster recovery. The company discovers that the text files contain social security numbers. The compliance team needs to ensure that the data is not stored in a region that is not approved. What is the best course of action?

   • AMove the primary bucket to the unapproved region and delete the original.
   • BKeep the replication but document the location in the compliance report.
   • CEncrypt the files in the unapproved region and keep them there for DR purposes.
   • DDisable cross-region replication and delete the replicated copy in the unapproved region.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a cloud storage bucket that contains a mix of unstructured data (images, videos) and semi-structured data (JSON logs). The security team needs to discover all data that contains personal data to comply with GDPR. The company has a data discovery tool that can classify content. However, the tool is currently configured to only scan the JSON logs. What is the most likely consequence of this configuration?

   • AThe tool will only scan the JSON logs, but that is sufficient because GDPR only applies to structured data.
   • BThe tool will automatically expand its scan to include images and videos because they are in the same bucket.
   • CThe tool will scan the images and videos but will not be able to classify them because they are unstructured.
   • DPersonal data in images and videos will not be discovered, leading to incomplete compliance.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational corporation uses a cloud provider with regions in the US, EU, and Asia. They have a mix of structured data in relational databases and unstructured data in object storage. A new regulation requires that all customer data for EU residents be stored within the EU. The company has already discovered that some EU customer data is stored in a US region. They need to remediate this. Which approach best addresses the compliance requirement while minimizing disruption?

   • AEncrypt the data in the US region and keep it there, arguing that encryption satisfies the regulation.
   • BUse the cloud provider's data replication feature to copy the EU data to an EU region, then update the application to point to the new location, and finally delete the original data.
   • CCreate a new EU region database and manually re-enter all EU customer data, then decommission the US database.
   • DApply a legal hold to the data in the US region to prevent deletion, and document the location in the compliance report.
   Reveal Solution Discussion Select an answer first