A company is decommissioning an old server that contains confidential client data. The server will be returned to the leasing company. The security policy requires that data be irrecoverable. Which disposal method is MOST appropriate?

Delete all files and folders, then empty the recycle bin.

Use a software tool to overwrite the drives with zeros once.

Perform a cryptographic erase of the drives and then physically destroy the drives.

Reformat the hard drives and reinstall the operating system.

A multinational company must protect customer data stored in a database that is replicated between data centers in two different countries. The data is encrypted at rest in both locations. The security team is concerned about data being intercepted during replication. The network team has implemented a VPN between the data centers, but the security team wants an additional layer of protection. Which option provides the BEST additional protection for the data in transit?

Implement IPsec on the database servers themselves.

Use a dedicated private fiber connection between the data centers.

Encrypt the database files with a different key in each data center.

Enable TLS encryption for the database replication traffic.

A hospital stores patient records on a file server and also creates backup tapes that are stored off-site. The security team wants to ensure that the data is protected both at rest and during transport to the off-site facility. The backup tapes are encrypted, but the file server is not. Which additional control is MOST important to implement?

Implement a formal media labeling and inventory system.

Enable full-disk encryption on the file server.

Require two-person integrity for all access to the backup tapes.

Use a bonded courier with GPS tracking for the tapes.

A company has two offices connected by a dedicated leased line. The security team wants to ensure that data transferred between the offices is protected from interception. Which solution is MOST appropriate?

Use application-level encryption for each application.

Use IPsec VPN between the two office routers.

Rely on the leased line's physical security.

Use a firewall to block unauthorized traffic between the offices.

Certified Information Systems Security Professional

Domain 7Objective 5

7.5 - Apply Resource Protection CISSP Practice Questions (Page 4)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

13%of the exam

Questions 16–20

16foundation · easy
Which approach secures stored data by encrypting only specific files or folders rather than the entire storage medium?
Select an answer first
17application · medium
A company is decommissioning an old server that contains confidential client data. The server will be returned to the leasing company. The security policy requires that data be irrecoverable. Which disposal method is MOST appropriate?
Select an answer first
18expert · hard
A multinational company must protect customer data stored in a database that is replicated between data centers in two different countries. The data is encrypted at rest in both locations. The security team is concerned about data being intercepted during replication. The network team has implemented a VPN between the data centers, but the security team wants an additional layer of protection. Which option provides the BEST additional protection for the data in transit?
Select an answer first
19expert · hard
A hospital stores patient records on a file server and also creates backup tapes that are stored off-site. The security team wants to ensure that the data is protected both at rest and during transport to the off-site facility. The backup tapes are encrypted, but the file server is not. Which additional control is MOST important to implement?
Select an answer first
20application · medium
A company has two offices connected by a dedicated leased line. The security team wants to ensure that data transferred between the offices is protected from interception. Which solution is MOST appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.5 - Apply Resource Protection CISSP Practice Questions (Page 4)

Questions 16–20

Which approach secures stored data by encrypting only specific files or folders rather than the entire storage medium?

A company is decommissioning an old server that contains confidential client data. The server will be returned to the leasing company. The security policy requires that data be irrecoverable. Which disposal method is MOST appropriate?

A company has two offices connected by a dedicated leased line. The security team wants to ensure that data transferred between the offices is protected from interception. Which solution is MOST appropriate?

Keep studying — Security Operations