A company stores customer data in a database and also allows employees to access it through a web application. The company wants to protect the data while it is being processed by the web application. Which control is most appropriate for this purpose?

Implement application-level access controls and memory protection.

Use TLS for the web application connection.

Use a DLP solution to monitor data at rest.

A company wants to prevent sensitive data from being sent outside the organization via email. The data is stored on a file server and accessed by employees. Which control is most effective for this requirement?

Implement a DLP solution that monitors outbound email.

Use TLS for email communications.

Encrypt the file server at rest.

Restrict access to the file server with ACLs.

An employee at a law firm accidentally sends a confidential client contract to the wrong email address. The email is delivered to an external recipient who was not authorized to see it. Which type of incident is this?

Data in motion exposure, because the email was transmitted over the network.

Data at rest breach, because the contract was stored in the email system.

Data leakage, because the contract was disclosed to an unauthorized recipient.

Data loss, because the contract was sent outside the organization.

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 13

2.13 Apply the Concepts of Data Loss, Data Leakage, Data in Motion, Data in Use, and Data at Rest Based on Common Standards 350-201 Practice Questions (Page 5)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

30%of the exam

Questions 21–25

21foundation · easy
A security team needs to protect sensitive data that is being transmitted from a web server to a client browser. Which control is most appropriate for this data state?
Select an answer first
22foundation · easy
A database administrator is encrypting a database file that is stored on an encrypted disk volume. Which data state is being protected?
Select an answer first
23application · medium
A company stores customer data in a database and also allows employees to access it through a web application. The company wants to protect the data while it is being processed by the web application. Which control is most appropriate for this purpose?
Select an answer first
24application · medium
A company wants to prevent sensitive data from being sent outside the organization via email. The data is stored on a file server and accessed by employees. Which control is most effective for this requirement?
Select an answer first
25application · medium
An employee at a law firm accidentally sends a confidential client contract to the wrong email address. The email is delivered to an external recipient who was not authorized to see it. Which type of incident is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.13 Apply the Concepts of Data Loss, Data Leakage, Data in Motion, Data in Use, and Data at Rest Based on Common Standards 350-201 Practice Questions (Page 5)

Questions 21–25

A security team needs to protect sensitive data that is being transmitted from a web server to a client browser. Which control is most appropriate for this data state?

A database administrator is encrypting a database file that is stored on an encrypted disk volume. Which data state is being protected?

A company stores customer data in a database and also allows employees to access it through a web application. The company wants to protect the data while it is being processed by the web application. Which control is most appropriate for this purpose?

A company wants to prevent sensitive data from being sent outside the organization via email. The data is stored on a file server and accessed by employees. Which control is most effective for this requirement?

An employee at a law firm accidentally sends a confidential client contract to the wrong email address. The email is delivered to an external recipient who was not authorized to see it. Which type of incident is this?

Keep studying — Techniques