2.14 Describe the Different Mechanisms to Detect and Enforce Data Loss Prevention Techniques 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company uses Salesforce to manage customer data. They want to prevent sensitive data from being exported to external systems via Salesforce's API, but they also want to allow authorized integrations. Which DLP mechanism should they implement?

   • ADeploy a network DLP sensor that monitors API traffic to Salesforce and blocks sensitive data.
   • BConfigure Salesforce's native sharing settings to restrict API access to authorized users only.
   • CUse a cloud-based DLP service that integrates with Salesforce's API to monitor and block unauthorized exports.
   • DUse a host-based DLP agent on all workstations to block API calls from browsers.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A financial services firm has a mix of Windows and macOS laptops. Employees frequently email spreadsheets containing customer PII to personal accounts. The security team wants to block these transfers at the endpoint, regardless of whether the email is sent via a web browser or a desktop mail client. Which DLP mechanism should be the primary control?

   • AUse a cloud-based DLP service that scans email attachments after they are uploaded to the corporate cloud.
   • BConfigure a network-based DLP sensor at the internet gateway to inspect SMTP traffic and drop offending emails.
   • CDeploy a host-based DLP agent on all laptops that inspects outbound email content and blocks policy-violating messages.
   • DEnable application-based DLP inside the firm's email server to quarantine messages with PII.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A network-based DLP sensor is deployed at an internet egress point. What is its primary method for detecting unauthorized data transfers?

   • AInspecting network packets for sensitive data patterns and policy violations
   • BBlocking all outbound traffic that uses non-standard ports
   • CQuerying the corporate database to check for unauthorized exports
   • DInstalling an agent on each endpoint to monitor file access
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A multinational company has offices in multiple countries with strict data residency requirements. They use a cloud-based DLP service that scans data in SaaS applications. The security team wants to prevent data exfiltration via web uploads from endpoints, but the network traffic is encrypted end-to-end and the company does not want to perform TLS interception due to privacy regulations. Which DLP approach should be used?

   • ADeploy host-based DLP agents on endpoints to monitor and block web uploads of sensitive data.
   • BDeploy a network-based DLP sensor that performs TLS interception at the egress.
   • CRely solely on the cloud-based DLP service to detect uploads to external web services.
   • DUse an application-based DLP plugin for all web browsers.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A law firm has a host-based DLP agent on all laptops, but they are seeing data exfiltration via a custom application that uses a proprietary protocol to send data to a remote server. The network DLP sensor does not understand the protocol. Which approach would best detect the exfiltration?

   • ABlock the custom application's network access entirely.
   • BUse an application-based DLP plugin for the custom application.
   • CUpdate the network DLP sensor to decode the proprietary protocol.
   • DConfigure the host-based DLP agent to monitor the custom application's network activity and block data transfers that match sensitive data patterns.
   Reveal Solution Discussion Select an answer first