Data Processing Data Security and Privacy 1 — Questions and Answers
Question 1: What is encryption in the context of data processing?
- Converting data into a coded format to prevent unauthorized access (Correct answer)
- Compressing data to reduce storage requirements
- Organizing data into structured tables
- Validating data for accuracy and completeness
Correct answer: Converting data into a coded format to prevent unauthorized access
Encryption converts data into ciphertext that can only be read by authorized parties who possess the correct decryption key.
Question 2: Which technique replaces sensitive data with realistic but fictitious values to protect privacy?
- Data masking (Correct answer)
- Data encryption
- Data compression
- Data indexing
Correct answer: Data masking
Data masking substitutes sensitive information with realistic but fictitious values, protecting privacy while keeping the data format usable for testing or analysis.
Question 3: What is a data breach?
- An incident where unauthorized individuals gain access to confidential data (Correct answer)
- A backup failure that results in permanent data loss
- A scheduled maintenance window that interrupts data processing
- The process of migrating data between two systems
Correct answer: An incident where unauthorized individuals gain access to confidential data
A data breach occurs when unauthorized individuals access, steal, or expose confidential data without permission from the data owner.
Question 4: Which security principle states that users should only have access to the minimum data required for their job?
- Principle of Least Privilege (Correct answer)
- Role-Based Access Control
- Separation of Duties
- Defense in Depth
Correct answer: Principle of Least Privilege
The Principle of Least Privilege ensures users have only the minimum access rights necessary to perform their job, reducing the risk of accidental or malicious data exposure.
Question 5: What does HTTPS provide when data is transmitted between a browser and a web server?
- Encrypted communication to protect data from eavesdropping (Correct answer)
- Faster data transfer speeds compared to HTTP
- Automatic compression of webpage content
- Validation of data accuracy before transmission
Correct answer: Encrypted communication to protect data from eavesdropping
HTTPS uses SSL/TLS encryption to secure data transmitted between a browser and web server, protecting against eavesdropping and tampering.
Question 6: What is the primary role of a firewall in data security?
- Monitoring and controlling incoming and outgoing network traffic based on security rules (Correct answer)
- Encrypting the contents of hard drives to prevent unauthorized access
- Backing up databases to protect against data loss
- Authenticating users before they can access the network
Correct answer: Monitoring and controlling incoming and outgoing network traffic based on security rules
A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted internal networks and untrusted external networks.
Question 7: What is two-factor authentication (2FA)?
- A security process requiring two different forms of verification to grant access (Correct answer)
- A method of encrypting data using two separate cryptographic keys
- A technique that validates data twice before it is stored in a database
- A backup system that stores copies of data in two separate locations
Correct answer: A security process requiring two different forms of verification to grant access
Two-factor authentication requires users to provide two distinct forms of verification — such as a password and a one-time SMS code — before access is granted.
Data Processing Data Security and Privacy 1
What is encryption in the context of data processing?