Implement Data Discovery CCSP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company stores user-uploaded documents in a cloud storage bucket. The documents are a mix of Word files, PDFs, and images. The company needs to discover which documents contain personally identifiable information (PII) to apply data loss prevention (DLP) policies. What is the best discovery method?

   • ACheck the file metadata for author names and creation dates.
   • BUse a cloud DLP service that can scan the content of documents and images for PII patterns.
   • CSearch the file names for keywords like 'resume' or 'passport'.
   • DOnly scan the PDF files because Word files and images are not commonly used for PII.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A logistics company uses a cloud-based API that receives shipment tracking updates in JSON format. The JSON payloads contain customer names, addresses, and package details. The security team wants to discover all instances of this semi-structured data across the cloud environment to ensure it is encrypted at rest. What is the best way to locate this data?

   • AOnly scan the API gateway logs to see where the JSON data is being sent.
   • BSearch the cloud environment for storage services and databases that contain JSON documents with fields matching the tracking update schema.
   • CPerform a broad keyword search for the word 'shipment' across all files in the cloud.
   • DAsk the development team to provide a list of all endpoints that return JSON.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A cloud security analyst is tasked with discovering data assets that have a predefined structure, such as tables with rows and columns, and a formal schema that defines data types and relationships. Which type of data is the analyst primarily targeting?

   • AUnstructured data
   • BSemi-structured data
   • CMetadata
   • DStructured data
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company uses a combination of a relational database and a NoSQL database. The relational database stores customer orders, and the NoSQL database stores session data. Both databases may contain customer email addresses. The security team needs to discover all email addresses across both databases. What is the most efficient approach?

   • AManually query the relational database for email columns and the NoSQL database for email fields.
   • BUse a data discovery tool that can connect to both databases and scan the relational schema and the NoSQL documents for email fields.
   • CExport both databases to CSV files and then search the CSV files for email addresses.
   • DOnly scan the relational database because NoSQL session data is temporary.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A healthcare organization stores patient consent forms as scanned PDFs in a cloud object storage bucket. The organization must ensure that these documents are not stored in a region that violates data residency requirements. The documents have no consistent metadata tags. What is the most effective approach to discover the location of this data?

   • ADownload a sample of the PDFs and check the file metadata for the creation location.
   • BUse the cloud provider's storage inventory and location API to list all objects in the bucket and their storage region.
   • CRun a content-based scan on the PDFs to identify any text that mentions a specific country.
   • DApply a classification label to the bucket and then query the label to find the region.
   Reveal Solution Discussion Select an answer first