Plan and Implement Data Retention, Deletion, and Archiving Policies CCSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A cloud customer needs to ensure that data on a decommissioned virtual disk is unrecoverable. Which method is MOST appropriate in a cloud environment?

   • ADeleting the disk from the cloud console
   • BDegaussing the physical disk
   • CCryptographic erasure of the disk's encryption key
   • DOverwriting the disk with random data
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of using tiered storage in a data archiving strategy?

   • ATo reduce storage costs by moving less frequently accessed data to cheaper storage tiers
   • BTo encrypt data at rest using different encryption algorithms
   • CTo improve data retrieval speed for frequently accessed data
   • DTo ensure data is replicated across multiple geographic regions
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is in litigation and has a legal hold on certain documents. The IT team accidentally runs a script that deletes a large number of files, including some that are under the legal hold. The cloud storage service has versioning enabled. What is the most appropriate immediate action?

   • ADisable versioning to prevent further changes, then restore the files.
   • BContact the cloud provider to request a restore from their backup tapes.
   • CRestore the deleted files from the most recent version and then apply a legal hold to prevent future deletion.
   • DInform the legal team that the data is lost and cannot be recovered.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is decommissioning a cloud-based application and needs to ensure that all personally identifiable information (PII) is securely deleted. The data is stored in a relational database with automated backups. What should the company do?

   • AOverwrite the database files with random data before deleting.
   • BDelete the database but keep backups for a year in case of data recovery needs.
   • CEncrypt the database and then delete the encryption key, but keep the database for auditing.
   • DDelete the database and all backups, then verify that no copies remain in the cloud provider's disaster recovery systems.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is required to delete customer data at the end of a contract, but a litigation hold is in place for a subset of that data. The data is stored in a cloud database with automated backups. What should the company do?

   • ADelete all customer data and rely on the litigation hold to protect the subset.
   • BApply a legal hold to the subset of data under litigation, then delete the remaining customer data and all associated backups.
   • CKeep all customer data until the litigation is resolved, then delete everything.
   • DDelete the database and all backups, then restore the held data from a separate archive.
   Reveal Solution Discussion Select an answer first