2.14 Describe the Different Mechanisms to Detect and Enforce Data Loss Prevention Techniques 350-201 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company uses a cloud-based code repository (SaaS) and wants to prevent source code from being downloaded by contractors and shared externally. The company also wants to monitor if source code is accidentally pasted into public forums. Which DLP mechanism should be the primary control?

   • AUse only a network-based DLP sensor to monitor all traffic to and from the code repository.
   • BUse application-based DLP plugins for the code repository and the web browser.
   • CInstall host-based DLP agents on contractor devices to block downloads and monitor clipboard.
   • DEnable cloud-based DLP for the code repository to block downloads and external sharing, and use a network-based DLP sensor to detect code pasted into web forums.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A bank uses a legacy customer relationship management (CRM) application that stores customer financial data. The security team wants to prevent employees from exporting customer lists to Excel files and emailing them externally. The CRM does not support modern DLP integrations. Which DLP approach would be most effective?

   • ADeploy a host-based DLP agent that monitors file creation and outbound email content on endpoints.
   • BUse a cloud-based DLP service to scan the CRM's database.
   • CConfigure a network-based DLP sensor to block SMTP traffic containing customer data.
   • DUse an application-based DLP wrapper around the CRM to disable the export feature.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company uses Microsoft 365 and also has on-premises file servers. They want to prevent sensitive data from being shared externally via OneDrive and also prevent data from being exfiltrated via email. They have a budget constraint and want to use a single DLP vendor. Which approach would be the most effective?

   • AUse Microsoft Purview for cloud-based DLP on OneDrive and Exchange Online, and deploy a network DLP sensor for on-premises email.
   • BUse a network DLP sensor to inspect all traffic to Microsoft 365 and on-premises email.
   • CDeploy a host-based DLP agent on all workstations to cover OneDrive and email.
   • DImplement an application-based DLP plugin for Outlook and OneDrive.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An organization uses a cloud email service and wants to prevent users from sending credit card numbers in email attachments. Which application-based DLP mechanism would be most appropriate?

   • AA network sensor placed at the internet egress to inspect SMTP traffic
   • BA database firewall that blocks queries returning credit card numbers
   • CAn email gateway that integrates with the cloud email service to scan messages for sensitive content
   • DA host-based agent that monitors the user's clipboard
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is moving from an on-premises email system to a cloud-based email service. They currently have a network-based DLP sensor that inspects SMTP traffic. The security team wants to maintain DLP coverage for email after the migration, but many employees will access email from personal devices and remote locations. Which approach provides the most comprehensive coverage?

   • AEnable the cloud email provider's native DLP service and keep the network DLP sensor for any remaining on-premises traffic.
   • BInstall host-based DLP agents on all personal devices.
   • CRely on the existing network DLP sensor to inspect all email traffic.
   • DUse an application-based DLP plugin for the email client.
   Reveal Solution Discussion Select an answer first