2.14 Describe the Different Mechanisms to Detect and Enforce Data Loss Prevention Techniques 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A healthcare organization uses a third-party SaaS EHR system. They need to prevent users from printing or exporting patient records from the EHR, but they also need to allow printing for legal requests. Which DLP mechanism would be the most appropriate?

   • ADeploy a host-based DLP agent that blocks all print and export operations on workstations.
   • BUse the EHR's built-in DLP features to control print/export actions based on user roles.
   • CConfigure a cloud-based DLP policy that blocks all print/export from the EHR.
   • DPlace a network DLP sensor in front of the EHR to block print/export traffic.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A hospital's security team wants to detect when employees upload patient records to personal cloud storage. The hospital uses a mix of managed and unmanaged devices, and the network traffic is already decrypted at the egress point. Which DLP approach best meets the requirement?

   • AInstall host-based DLP agents on all managed devices and rely on them to block uploads.
   • BDeploy a network-based DLP sensor at the internet egress that inspects decrypted HTTP/HTTPS traffic for patient data patterns.
   • CConfigure an application-based DLP policy in the hospital's EHR system to prevent exports.
   • DUse a cloud-based DLP service that scans files already stored in the hospital's cloud tenant.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A law firm uses a cloud-based document management system (DMS) where attorneys collaborate on case files. The firm wants to prevent attorneys from printing or downloading documents marked as 'privileged' to local drives, while still allowing them to view and edit within the DMS. Which DLP mechanism should be used?

   • AEnable application-based DLP controls within the DMS that restrict printing and downloading for documents with the 'privileged' classification.
   • BUse a cloud-based DLP service that scans documents at rest in the DMS and quarantines privileged ones.
   • CInstall a host-based DLP agent that monitors file operations and blocks saving to local drives.
   • DDeploy a network-based DLP sensor that blocks HTTP downloads of documents from the DMS.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses Microsoft 365 and allows employees to share files externally via OneDrive. The security team wants to prevent sensitive documents from being shared with personal email domains, but they also want to allow sharing with approved partner domains. Which DLP mechanism should they configure to meet this requirement?

   • AA network DLP sensor that inspects HTTPS traffic to OneDrive and blocks uploads to personal domains.
   • BA host-based DLP agent that monitors browser uploads and blocks the OneDrive web interface.
   • CAn application-based DLP plugin for OneDrive that restricts sharing to approved domains.
   • DA cloud-based DLP policy in Microsoft Purview that blocks sharing to unapproved domains.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's remote workforce uses personal laptops to access corporate SaaS applications. The security team wants to prevent sensitive data from being downloaded to personal devices, but they also want to allow access to the applications. Which DLP mechanism would be the most effective?

   • ARequire a VPN for all remote access and inspect traffic with a network DLP sensor.
   • BDeploy a cloud-based DLP policy that blocks downloads to unmanaged devices.
   • CUse a network DLP sensor at the corporate office to monitor remote traffic.
   • DInstall a host-based DLP agent on personal laptops to monitor downloads.
   Reveal Solution Discussion Select an answer first