Implement Data Discovery CCSP Practice Questions (Page 5)

Questions 21–22

1. 21expert · hard

   A company uses a cloud-based email service that stores emails in a data center in the US. The company has a branch office in the EU and wants to ensure that EU employee emails are stored in the EU. The email service offers the ability to choose the data residency region. What is the best approach?

   • AConfigure the email service to store EU employee mailboxes in an EU region, and migrate existing EU mailboxes to that region.
   • BStore all mailboxes in the US and argue that the EU has no jurisdiction over US data.
   • CKeep all mailboxes in the US but encrypt them with EU-approved encryption.
   • DAsk EU employees to use a separate email service that is hosted in the EU.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A financial services company is migrating its customer relationship management (CRM) system to a cloud provider. The CRM data is stored in a relational database with a known schema. The compliance team needs to identify which database tables contain personally identifiable information (PII) to apply appropriate controls. The company has already cataloged the database schema and metadata. What is the most efficient next step to locate the PII?

   • APerform a full-text search across all database records to find any value that looks like a social security number.
   • BRun a data discovery tool that scans the database schema and metadata to flag columns with PII-like names and data types.
   • CReview the database backup files to see which tables are most frequently accessed.
   • DAsk the database administrator to manually review each table and provide a list of PII columns.
   Reveal Solution Discussion Select an answer first