Evaluate and Select Reusable Technologies CSSLP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company's backup policy requires that backups be retained for 30 days, but the legal team has identified that some backups contain personally identifiable information (PII) that must be destroyed after 30 days. The backups are stored on tape and in cloud object storage. The security team must ensure that the PII is not recoverable after the retention period. Which approach should be used?

   • AStore all backups on tape and physically destroy the tapes after 30 days
   • BUse a combination of tape degaussing and cloud object lifecycle policies with secure deletion (e.g., cryptographic erasure)
   • COverwrite the tape backups once and rely on cloud versioning to delete old versions
   • DEncrypt all backups and keep the encryption keys for 30 days, then discard the keys
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which database security control is used to restrict the columns and rows a user can see in a table?

   • ATrigger
   • BEncryption
   • CView
   • DPrivilege management
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which scenario best illustrates a DLP control in action?

   • AA user is required to change their password every 90 days.
   • BA server is patched to fix a known vulnerability.
   • CAn email containing credit card numbers is blocked from being sent outside the organization.
   • DA firewall blocks traffic from an untrusted IP address.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the most secure method for destroying data on a solid-state drive (SSD) that is being decommissioned?

   • AOverwriting the drive with zeros once.
   • BFormatting the drive.
   • CDeleting all files and emptying the recycle bin.
   • DPhysical destruction of the drive.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary purpose of using encryption for database security?

   • ATo manage user authentication.
   • BTo prevent SQL injection attacks.
   • CTo ensure database availability.
   • DTo protect data at rest from unauthorized access if the storage medium is compromised.
   Reveal Solution Discussion Select an answer first