Implement Data Discovery CCSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company uses a cloud-based log management service that stores application logs in JSON format. The logs contain user IP addresses and session IDs. The security team needs to discover which logs contain user IP addresses to ensure they are retained according to policy. What is the best way to discover this?

   • AAsk the application team to confirm which logs contain IP addresses.
   • BDownload all logs and search them with a text editor for the string 'ip'.
   • CCheck the log retention policy to see which logs are kept.
   • DUse the log management service's search capability to query for logs that contain an 'ip_address' field.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail company has a data warehouse in the cloud that contains sales transactions. The company is subject to a regulation that requires them to know the location of all data that includes customer payment card information. The data warehouse uses a star schema with fact and dimension tables. What is the most efficient way to discover which tables contain payment card data?

   • AScan the data dictionary and metadata for column names like 'card_number' or 'cvv'.
   • BCheck the ETL job logs to see which tables are loaded from the payment processing system.
   • CAsk the data warehouse administrator to provide a list of tables that are accessed by the finance team.
   • DRun a query to select all rows from every table and look for 16-digit numbers.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   An organization is performing data discovery across its cloud storage buckets. The security team finds files such as PDFs, images, and videos that do not follow a predefined data model or schema. Which type of data are these files classified as?

   • AStructured data
   • BUnstructured data
   • CRelational data
   • DSemi-structured data
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An e-commerce company has a relational database for orders and a separate system that exports order summaries as XML files for reporting. The security team needs to discover all locations where customer email addresses are stored. What is the best approach?

   • AOnly scan the database because XML files are just reports and not primary storage.
   • BAsk the reporting team to confirm that the XML files do not contain email addresses.
   • CScan the database schema for columns named 'email' and also search the XML files for an 'email' element.
   • DSearch all files in the company's file shares for the string 'email'.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company uses a cloud provider that offers a global network of regions. They have a database in the 'us-east-1' region. A new client requires that their data be stored in Canada. The company needs to determine if the current database location is acceptable. What is the first step?

   • AAsk the client if they are willing to accept data stored in the US.
   • BEncrypt the database and argue that encryption makes the location irrelevant.
   • CAssume the data is in Canada because 'us-east-1' is close to Canada.
   • DCheck the cloud provider's documentation to see if there is a region in Canada, and if so, plan to migrate the database.
   Reveal Solution Discussion Select an answer first