Plan and Implement Data Retention, Deletion, and Archiving Policies CCSP Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A company needs to delete a cloud storage bucket that contains sensitive data. The bucket has versioning enabled and multiple objects with delete markers. What must the company do to ensure the data is unrecoverable?

   • ADelete all object versions and delete markers, then delete the bucket.
   • BDelete the bucket; the provider will purge all data.
   • COverwrite each object with dummy data and then delete the bucket.
   • DDisable versioning and then delete the bucket.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A research institution generates large datasets that must be retained for 10 years but are accessed only a few times per year. The institution wants to minimize costs while ensuring data can be retrieved within 24 hours when needed. Which storage strategy should they use?

   • AUse a lifecycle policy to transition the data to cold storage after an initial period, with a retrieval option that meets the 24-hour requirement.
   • BDelete the data after 5 years and rely on the researchers to re-download from external sources.
   • CStore the data in hot storage for the entire 10-year period.
   • DStore the data on local tapes and keep them in a secure facility.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A company must implement a data retention policy across its cloud storage. Which action is a key part of implementing such a policy?

   • AApplying lifecycle management rules to transition or expire objects based on age
   • BGranting all users write access to storage buckets
   • CEncrypting all data at rest with a customer-managed key
   • DDisabling versioning on all storage buckets
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company stores sensitive data in a cloud object storage service. They need to ensure that data is securely deleted when it reaches the end of its retention period, but they also need to keep an audit trail of when data was deleted. What should they implement?

   • AArchive objects to cold storage and never delete them, relying on the archive as the audit trail.
   • BEnable object versioning and rely on the audit log to record deletion events.
   • CUse a lifecycle policy to delete objects and enable cloud audit logging to record the deletion actions.
   • DManually delete objects at the end of the retention period and keep a spreadsheet of deletion dates.
   Reveal Solution Discussion Select an answer first