Which of the following is the FIRST requirement a data owner should consider before implementing a data retention policy? A. Training B. Legal C. Business D. Storage

Your organization has recently deployed a patch management system to automate updates. However, shortly after a critical patch was applied, a key application stopped functioning, disrupting business operations. What is the best way to prevent such incidents in the future? A. Roll back the patch and delay future updates until the issue is resolved. B. Implement a test environment to evaluate patches before deployment. C. Limit patch deployments to non-critical systems during business hours. D. Require vendor verification before applying critical patches.

An external audit of your organization’s disaster recovery plan reveals that backups are not encrypted, exposing sensitive data to potential breaches during transit or storage. Which of the following should be implemented immediately to address this finding? A. Implement full disk encryption on all backup storage devices. B. Transition to incremental backups to minimize data exposure. C. Configure end-to-end encryption for all backup processes. D. Move backups to a private cloud infrastructure with built-in security.

You are responsible for managing a 24/7 Security Operations Center (SOC). Recently, analysts have reported an increase in false positives from intrusion detection systems (IDS), leading to fatigue and delayed responses to actual incidents. What is the most effective solution to address this issue? A. Increase the number of SOC analysts to handle the alert volume. B. Conduct a baseline review of network traffic and fine-tune IDS rule sets. C. Replace the current IDS with an intrusion prevention system (IPS) for better accuracy. D. Implement an automated incident response system to reduce analyst involvement.

A cloud service provider (CSP) offers various data storage options to its customers. A customer needs to store highly sensitive financial data with strict regulatory compliance requirements. Which of the following storage options offered by the CSP would be MOST appropriate? A. Object storage, offering high scalability and cost-effectiveness for unstructured data. B. Ephemeral storage, providing temporary storage for short-lived workloads. C. Block storage with server-side encryption and customer-managed encryption keys, providing granular control and enhanced security. D. File storage with access control lists (ACLs) for basic access management.