Determine How to Find Unprotected Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company uses a hybrid cloud environment with on-premises storage, cloud object storage, and edge devices. The security team wants to ensure all data sources are included in their protection assessment. Which action should they take?

   • AReview the backup logs for all data sources to identify which ones are not being backed up.
   • BFocus on on-premises storage because it contains the most sensitive data.
   • CUse a discovery tool that scans all environments, including cloud and edge, to build a complete data inventory.
   • DAsk each cloud provider to provide a list of all data stored in their services.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary method for detecting gaps in data protection coverage?

   • AInterviewing data owners about their data classification
   • BConducting a penetration test on the storage infrastructure
   • CComparing existing backup and replication policies against the data inventory
   • DReviewing the organization's cybersecurity incident response plan
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company has a limited budget for data protection and must prioritize which data sources to protect. They have identified several unprotected data sources, including a customer database with payment information, an internal wiki with product documentation, and a file share with employee performance reviews. The company is subject to GDPR and PCI DSS. Which data source should be protected first?

   • AAll three data sources at the same time, because all data should be protected equally.
   • BThe file share with employee performance reviews, because it contains personal data.
   • CThe internal wiki with product documentation, because it is used by many employees.
   • DThe customer database with payment information, because it is subject to PCI DSS and has high business criticality.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator notices that a critical database has not been backed up for the past three days. The backup job for the database shows a status of 'failed' each night. Which action should the administrator take to determine if the database is unprotected?

   • ARestore the database from the last known good backup to ensure data is available.
   • BCheck if the database is included in the data inventory.
   • CReview the backup logs to identify the cause of the failures and determine if any recent backup succeeded.
   • DImmediately create a new backup policy for the database.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   After completing an assessment, a security analyst has identified several unprotected data sources. The analyst needs to communicate the findings to senior management, who are not technical. Which format should the analyst use to report the findings?

   • AA detailed technical report with command-line outputs and log excerpts.
   • BAn email with a list of all unprotected data sources and their IP addresses.
   • CA spreadsheet listing every data source and its protection status.
   • DA high-level summary with a prioritized list of risks and recommended actions.
   Reveal Solution Discussion Select an answer first