CyberVista Data Security and Privacy Flashcards
7 cards from real CyberVista Test practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 CyberVista Data Security and Privacy flashcards as text
Which data classification label is typically assigned to information that, if disclosed, would cause serious damage to national security?
Answer: Top Secret
Top Secret is the highest government classification level and is applied to information whose unauthorized disclosure could cause exceptionally grave damage to national security.
A Data Loss Prevention (DLP) solution is BEST described as a tool that:
Answer: Monitors, detects, and blocks sensitive data exfiltration
DLP solutions inspect data in motion, at rest, and in use to identify and prevent unauthorized transmission or leakage of sensitive information.
Which encryption approach is MOST appropriate for protecting data at rest stored in a database?
Answer: Transparent Data Encryption (TDE)
Transparent Data Encryption (TDE) encrypts database files at the storage level, protecting data at rest without requiring application-level changes.
Data masking is primarily used to:
Answer: Replace sensitive data with realistic but fictitious values for non-production use
Data masking substitutes sensitive production data with structurally similar but non-sensitive values so developers and testers can work with realistic datasets safely.
Which of the following BEST describes the concept of data minimization?
Answer: Collecting only the data necessary for a specified purpose
Data minimization is a privacy principle requiring organizations to collect and retain only the minimum amount of personal data necessary to fulfill a specific, stated purpose.
A company wants to protect sensitive fields in a database while allowing applications to process transactions without exposing the actual values. Which technique is BEST suited?
Answer: Tokenization
Tokenization replaces sensitive data values (such as credit card numbers) with non-sensitive surrogate tokens, while a secure vault maps tokens back to the originals for authorized use.
Which standard provides a framework for protecting cardholder data and applies to any organization that stores, processes, or transmits payment card information?
Answer: PCI-DSS
The Payment Card Industry Data Security Standard (PCI-DSS) was created by major card brands to protect cardholder data and reduce credit card fraud.