A security administrator is decommissioning a server that contained highly sensitive customer data. The server's hard drives will be reused in a less secure environment. The administrator must ensure that no residual data can be recovered. Which method is the most appropriate?

Perform a cryptographic erase of the drives

Use a quick format and then defragment the drives

Format the drives and reinstall the operating system

Delete the files and empty the recycle bin

Which method is commonly used to prevent data remanence on a hard disk drive before it is reused?

Overwriting the disk with patterns of data

Moving the files to a different folder

A data owner in a healthcare organization has classified patient records as 'Confidential'. The data custodian is responsible for implementing controls. Which control should the custodian implement to ensure the data remains confidential and available throughout its lifecycle?

Label the data as 'Confidential' and restrict access to authorized users

Encrypt the data at rest and in transit, and implement regular backups

Store the data in a secure offsite location with no network access

Retain the data indefinitely to ensure availability

Certified Information Systems Security Professional

Domain 2Objective 4

2.4 - Manage Data Lifecycle CISSP Practice Questions (Page 1)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

10%of the exam

Questions 1–5

1expert · hard
A security administrator is decommissioning a server that contained highly sensitive customer data. The server's hard drives will be reused in a less secure environment. The administrator must ensure that no residual data can be recovered. Which method is the most appropriate?
Select an answer first
2foundation · easy
Which method is commonly used to prevent data remanence on a hard disk drive before it is reused?
Select an answer first
3application · medium
A data controller has hired a third-party vendor to process customer data on its behalf. The vendor will store and analyze the data. According to the data lifecycle, which role is the vendor?
Select an answer first
4foundation · easy
In an organization, which role is ultimately accountable for the classification and protection of a specific set of data assets, even though day-to-day management may be delegated?
Select an answer first
5application · medium
A data owner in a healthcare organization has classified patient records as 'Confidential'. The data custodian is responsible for implementing controls. Which control should the custodian implement to ensure the data remains confidential and available throughout its lifecycle?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.4 - Manage Data Lifecycle CISSP Practice Questions (Page 1)

Questions 1–5

A security administrator is decommissioning a server that contained highly sensitive customer data. The server's hard drives will be reused in a less secure environment. The administrator must ensure that no residual data can be recovered. Which method is the most appropriate?

Which method is commonly used to prevent data remanence on a hard disk drive before it is reused?

A data controller has hired a third-party vendor to process customer data on its behalf. The vendor will store and analyze the data. According to the data lifecycle, which role is the vendor?

In an organization, which role is ultimately accountable for the classification and protection of a specific set of data assets, even though day-to-day management may be delegated?

A data owner in a healthcare organization has classified patient records as 'Confidential'. The data custodian is responsible for implementing controls. Which control should the custodian implement to ensure the data remains confidential and available throughout its lifecycle?

Keep studying — Asset Security