CyberVista Data Security and Privacy Flashcards

Which method is MOST secure for disposing of sensitive data stored on magnetic hard drives?

Answer: Degaussing or physical destruction

Degaussing uses a powerful magnetic field to destroy data on magnetic media, while physical destruction (shredding/crushing) ensures data cannot be recovered by any means.

Data sovereignty refers to the concept that:

Answer: Data is subject to the laws of the country in which it is stored or processed

Data sovereignty means that digital data is subject to the laws and governance structures of the nation where it is physically located, which has significant implications for cloud storage decisions.

A company wants to ensure the integrity of backup data and prevent unauthorized tampering. Which control BEST addresses this requirement?

Answer: Using cryptographic hashing to verify backup integrity

Cryptographic hashing (e.g., SHA-256) generates a unique fingerprint of backup data; if any bit changes, the hash changes, immediately revealing tampering or corruption.

Which key management practice is MOST critical for maintaining long-term data confidentiality?

Answer: Regularly rotating encryption keys and securely storing them separately from the data

Regular key rotation limits the exposure window if a key is compromised, and storing keys separately from encrypted data ensures that gaining access to the ciphertext alone is insufficient.

What is the PRIMARY security concern when storing sensitive organizational data in a public cloud environment?

Answer: Loss of direct physical control over data and shared infrastructure risks

Public cloud environments introduce multi-tenancy risks, reduced physical control, and reliance on the provider's security controls, making data governance and shared responsibility models critical.

Which of the following BEST describes the difference between data integrity and data confidentiality?

Answer: Integrity ensures data has not been altered; confidentiality ensures only authorized parties can access it

Data integrity ensures that information remains accurate and unmodified except through authorized processes, while confidentiality ensures that data is accessible only to those with proper authorization.

An organization must retain financial records for 7 years per regulatory requirement but has been storing them indefinitely. This practice violates which data management principle?

Answer: Storage limitation

The storage limitation principle requires that personal and regulated data be kept in a form that permits identification of individuals no longer than necessary for the purposes for which it is processed.