A global financial services firm stores customer transaction data in a cloud region in the United States. The firm has customers in the EU and must comply with GDPR. The EU data protection authority (DPA) has determined that the US does not provide an adequate level of protection. What is the most appropriate action to enable lawful transfer of this data?

Encrypt the data before transfer

Move the data to an EU-based cloud region

Implement Standard Contractual Clauses (SCCs) with additional safeguards

Obtain explicit consent from each EU customer

A data custodian is responsible for maintaining the integrity of a database that contains financial records. The custodian must ensure that the data is accurate and consistent over time. Which control is most important to implement?

Implementing checksums and validation rules

Labeling the data as 'Confidential'

Encrypting the database at rest

Before collecting personal data from individuals, which practice is generally required by privacy regulations such as GDPR?

Performing a data remanence test

What is data remanence?

The residual representation of data that remains after deletion or sanitization attempts

The legal requirement to retain data for a specific period

The method of encrypting data to protect it at rest

The process of classifying data based on its sensitivity

Certified Information Systems Security Professional

Domain 2Objective 4

2.4 - Manage Data Lifecycle CISSP Practice Questions (Page 3)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

10%of the exam

Questions 11–15

11expert · hard
A global financial services firm stores customer transaction data in a cloud region in the United States. The firm has customers in the EU and must comply with GDPR. The EU data protection authority (DPA) has determined that the US does not provide an adequate level of protection. What is the most appropriate action to enable lawful transfer of this data?
Select an answer first
12application · medium
A multinational retailer is launching a loyalty program that collects customer purchase history and contact details. The program must comply with the EU General Data Protection Regulation (GDPR). The company's legal team has defined the purposes for processing and the retention period. Which role is responsible for determining the lawful basis for processing and the retention period?
Select an answer first
13application · medium
A data custodian is responsible for maintaining the integrity of a database that contains financial records. The custodian must ensure that the data is accurate and consistent over time. Which control is most important to implement?
Select an answer first
14foundation · easy
Before collecting personal data from individuals, which practice is generally required by privacy regulations such as GDPR?
Select an answer first
15foundation · easy
What is data remanence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.4 - Manage Data Lifecycle CISSP Practice Questions (Page 3)

Questions 11–15

A data custodian is responsible for maintaining the integrity of a database that contains financial records. The custodian must ensure that the data is accurate and consistent over time. Which control is most important to implement?

Before collecting personal data from individuals, which practice is generally required by privacy regulations such as GDPR?

What is data remanence?

Keep studying — Asset Security