4.4 Configure Data Loss Prevention and AI Guardrails for Secure Internet Access 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company wants to allow employees to use AI tools for productivity but is concerned about the AI being used to generate malicious content, such as phishing emails. They also need to ensure that AI usage complies with internal policies. Which AI guardrail configuration should be implemented?

   • ABlock all access to AI tools.
   • BConfigure guardrails to block prompts requesting malicious content, filter AI responses for policy violations, and log all AI interactions for review.
   • CAllow all AI interactions and rely on the AI provider's content moderation.
   • DOnly monitor AI interactions without any blocking.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a Data Loss Prevention (DLP) solution in a secure internet access deployment?

   • ATo block all inbound malicious traffic from the internet
   • BTo provide secure remote access for employees working from home
   • CTo encrypt all outbound web traffic to protect against eavesdropping
   • DTo prevent sensitive data from being transmitted outside the organization without authorization
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When configuring a DLP policy to detect sensitive data, which of the following is an example of a data pattern rule?

   • AA regular expression that matches a 16-digit credit card number
   • BA rule that quarantines emails with large attachments
   • CA rule that blocks all traffic to a specific IP address
   • DA rule that requires multi-factor authentication for all users
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A multinational company wants to allow employees to use AI tools but must comply with regional data protection laws that restrict the transfer of personal data outside certain jurisdictions. They also need to monitor AI usage for security incidents. Which approach best balances these requirements?

   • AUse a single global AI service endpoint and encrypt all data in transit.
   • BBlock all AI tool usage globally to avoid compliance issues.
   • CAllow all AI tool usage and rely on the AI provider's data handling policies.
   • DConfigure AI guardrails to route traffic to regional AI service endpoints that comply with local data residency requirements, and log all AI interactions centrally.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses a cloud access security broker (CASB) integrated with its SIA solution to control access to Microsoft 365. The DLP team wants to prevent users from sharing files containing credit card numbers via OneDrive external sharing links, but they must allow internal sharing. Which configuration should the team implement?

   • ABlock all external sharing in OneDrive at the tenant level.
   • BCreate a DLP policy that scans OneDrive files for credit card patterns and blocks external sharing links while allowing internal sharing.
   • CConfigure a DLP policy that only reports on credit card numbers in OneDrive without any enforcement.
   • DUse a network-level DLP rule that blocks all HTTPS traffic to OneDrive.
   Reveal Solution Discussion Select an answer first