CCP CCP Endpoint Security & Data Protection 2 — Questions and Answers
Question 1: What is the primary goal of data classification within an organization?
- To organize data alphabetically for easy retrieval
- To assign protection levels to data based on its sensitivity (Correct answer)
- To determine backup frequency schedules for data sets
- To identify data owners for cost allocation
Correct answer: To assign protection levels to data based on its sensitivity
Data classification assigns sensitivity labels so that appropriate security controls can be applied to protect data according to its value and risk.
Question 2: Which technique replaces sensitive data with a non-sensitive token that has no exploitable value?
- Encryption
- Hashing
- Tokenization (Correct answer)
- Data masking
Correct answer: Tokenization
Tokenization substitutes sensitive values such as credit card numbers with tokens that are meaningless outside the tokenization system.
Question 3: What is the purpose of application whitelisting on endpoints?
- To block all internet access for unapproved applications
- To allow only explicitly pre-approved applications to execute (Correct answer)
- To encrypt application data stored on the endpoint
- To monitor application performance and resource usage
Correct answer: To allow only explicitly pre-approved applications to execute
Application whitelisting permits only authorized applications to run, blocking all unauthorized executables including malware by default.
Question 4: Which standard mandates security controls for systems that process, store, or transmit payment card data?
- HIPAA
- SOX
- PCI DSS (Correct answer)
- FERPA
Correct answer: PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) requires organizations that handle payment card data to implement specific security controls.
Question 5: What is the primary function of a Mobile Device Management (MDM) solution?
- To monitor mobile data traffic for intrusions
- To centrally manage and enforce security policies on mobile devices (Correct answer)
- To provide encrypted VPN connectivity for mobile users
- To encrypt mobile application data while in transit
Correct answer: To centrally manage and enforce security policies on mobile devices
MDM solutions allow IT administrators to remotely manage configurations, enforce policies, and wipe or lock mobile devices as needed.
Question 6: Data masking is most commonly used to protect sensitive data when:
- Encrypting production data for offsite backup
- Used in non-production environments such as development and testing (Correct answer)
- Blocking unauthorized users from accessing live databases
- Compressing large data sets for archival storage
Correct answer: Used in non-production environments such as development and testing
Data masking replaces real sensitive data with realistic but fictitious values, protecting actual data while allowing testing with representative data.
CCP CCP Endpoint Security & Data Protection 2
What is the primary goal of data classification within an organization?