3.3 Data Protection Concepts & Strategies

Question 1

Data States

Answer 1

Data at Rest: Data stored on a storage medium.
Data in Transit: Data moving across a network.
Data in Use: Data being processed by a system.

Question 2

Data Classification

Answer 2

Public Data: Accessible to everyone.
Private Data: Accessible to a limited group.
Confidential Data: Sensitive data requiring strict access controls.
Restricted Data: Highly sensitive data requiring stringent security measures.

Question 3

Data Types

Answer 3

Regulated Data: Subject to specific regulations and compliance standards.
Trade Secrets: Confidential business information.
Intellectual Property: Creations of the mind protected by law.
Personal Health Information (PHI): Health-related information about individuals.
Personally Identifiable Information (PII): Information that can identify an individual.
Financial Information: Data related to financial transactions.

Question 4

Data Life Cycle

Answer 4

Create: Data generation, acquisition, or modification.
Store: Data storage on physical or digital media.
Use: Data processing, analysis, or modification.
Share: Data distribution to authorized users.
Archive: Long-term storage of inactive data.
Destroy: Securely erasing or destroying data.

Question 5

Securing Data

Answer 5

Geographic and Cultural Restrictions: Considering legal and cultural factors when storing and processing data.
Encryption: Protecting data by transforming it into unreadable ciphertext.
Hashing: Creating a unique digital fingerprint of data.
Masking: Hiding sensitive information by replacing it with characters.
Obfuscation: Making data difficult to understand.
Tokenization: Replacing sensitive data with non-sensitive tokens.
Segmentation and Compartmentalization: Dividing data into smaller, isolated segments.

Question 6

Load Balancing and Clustering

Answer 6

Load Balancing: Distributing network traffic across multiple servers to improve performance and reliability.
Clustering: Grouping multiple servers to work together as a single system.

Question 7

Backup Strategies

Answer 7

Full Backup: Complete copy of all data.
Incremental Backup: Backup of only data that has changed since the last backup.
Differential Backup: Backup of all data that has changed since the last full backup.
Snapshot: Point-in-time copy of data.
Journaling: Recording changes to data for recovery purposes.

Question 8

Continuity of Operations and Multicloud

Answer 8

Business Impact Analysis (BIA): Identifying critical business functions and their recovery time objectives (RTOs) and recovery point objectives (RPOs).
Disaster Recovery Planning (DRP): Developing a plan to restore IT systems and operations after a disaster.
Multicloud: Utilizing multiple cloud providers to improve reliability, performance, and security.

Question 9

Disaster Recovery Sites

Answer 9

Hot Site: Fully operational site with all necessary hardware, software, and data.
Warm Site: Site with essential hardware and software, but requires some setup time.
Cold Site: Site with minimal infrastructure, requiring significant setup time.
Cloud-Based Recovery: Leveraging cloud services for disaster recovery.

Question 10

Capacity Planning

Answer 10

People: Ensuring adequate staffing levels and skills.
Technology: Identifying and procuring necessary hardware and software.
Infrastructure: Planning for sufficient infrastructure capacity.

Question 11

Testing Techniques

Answer 11

Read-Through: Reviewing the disaster recovery plan.
Tabletop Exercise: Simulating a disaster scenario without actual systems.
Walkthrough Test: Practicing specific recovery procedures.
Simulation Test: Testing the actual recovery process with simulated data.Parallel Testing: Testing the recovery process in parallel with live operations.
Failover Testing: Switching to a backup system to test its functionality.