CyberVista Test CyberVista Data Security and Privacy 1 — Questions and Answers
Question 1: Which data classification label is typically assigned to information that, if disclosed, would cause serious damage to national security?
- Confidential
- Secret
- Top Secret (Correct answer)
- Sensitive
Correct answer: Top Secret
Top Secret is the highest government classification level and is applied to information whose unauthorized disclosure could cause exceptionally grave damage to national security.
Question 2: A Data Loss Prevention (DLP) solution is BEST described as a tool that:
- Encrypts all data stored on endpoints
- Monitors, detects, and blocks sensitive data exfiltration (Correct answer)
- Provides multi-factor authentication for data access
- Backs up critical data to an offsite location
Correct answer: Monitors, detects, and blocks sensitive data exfiltration
DLP solutions inspect data in motion, at rest, and in use to identify and prevent unauthorized transmission or leakage of sensitive information.
Question 3: Which encryption approach is MOST appropriate for protecting data at rest stored in a database?
- TLS 1.3
- Transparent Data Encryption (TDE) (Correct answer)
- IPsec tunnel mode
- SFTP
Correct answer: Transparent Data Encryption (TDE)
Transparent Data Encryption (TDE) encrypts database files at the storage level, protecting data at rest without requiring application-level changes.
Question 4: Data masking is primarily used to:
- Encrypt data during transmission over public networks
- Replace sensitive data with realistic but fictitious values for non-production use (Correct answer)
- Hash passwords before storing them in a database
- Tokenize payment card data for PCI-DSS compliance
Correct answer: Replace sensitive data with realistic but fictitious values for non-production use
Data masking substitutes sensitive production data with structurally similar but non-sensitive values so developers and testers can work with realistic datasets safely.
Question 5: Which of the following BEST describes the concept of data minimization?
- Compressing data to reduce storage costs
- Collecting only the data necessary for a specified purpose (Correct answer)
- Deleting all data after a project is complete
- Encrypting data to reduce its readable size
Correct answer: Collecting only the data necessary for a specified purpose
Data minimization is a privacy principle requiring organizations to collect and retain only the minimum amount of personal data necessary to fulfill a specific, stated purpose.
Question 6: A company wants to protect sensitive fields in a database while allowing applications to process transactions without exposing the actual values. Which technique is BEST suited?
- Data masking
- Tokenization (Correct answer)
- Hashing
- Steganography
Correct answer: Tokenization
Tokenization replaces sensitive data values (such as credit card numbers) with non-sensitive surrogate tokens, while a secure vault maps tokens back to the originals for authorized use.
Question 7: Which standard provides a framework for protecting cardholder data and applies to any organization that stores, processes, or transmits payment card information?
- HIPAA
- SOX
- PCI-DSS (Correct answer)
- FISMA
Correct answer: PCI-DSS
The Payment Card Industry Data Security Standard (PCI-DSS) was created by major card brands to protect cardholder data and reduce credit card fraud.
CyberVista Test CyberVista Data Security and Privacy 1
Which data classification label is typically assigned to information that, if disclosed, would cause serious damage to national security?