4.4 Configure Data Loss Prevention and AI Guardrails for Secure Internet Access 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a report that could be generated from DLP and AI guardrail monitoring data?

   • AA list of all employees' web browsing history
   • BA report on the number of active VPN connections
   • CA summary of blocked attempts to upload sensitive data to web applications
   • DA report on the CPU usage of the SIA gateway
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team wants to detect employees who are using AI tools to generate and then exfiltrate sensitive data. Which monitoring approach would best identify this behavior?

   • AReview only the AI guardrail logs for generated content.
   • BUse network flow logs to identify large data transfers.
   • CCorrelate AI guardrail logs with DLP incident logs to identify users who generate sensitive content and then attempt to transmit it.
   • DReview only the DLP incident logs for blocked transmissions.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In a DLP policy, what is the purpose of defining user actions?

   • ATo determine the password complexity requirements for users
   • BTo define which users are allowed to access the DLP console
   • CTo track user login times and locations
   • DTo specify what a user can do with sensitive data, such as block sending it via email or allow printing it
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses a secure web gateway (SWG) with integrated DLP to inspect web traffic. They need to prevent users from uploading files containing source code to public code repositories like GitHub, but they must allow access to GitHub for reading documentation. Which configuration should be implemented?

   • ACreate a DLP rule that detects source code patterns and blocks uploads to GitHub while allowing GET requests.
   • BBlock all access to GitHub.
   • COnly monitor uploads to GitHub without blocking them.
   • DAllow all uploads to GitHub and rely on user awareness training.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security operations team is investigating a potential data breach. They suspect that an employee used a personal cloud storage service to exfiltrate sensitive data. The DLP solution logs incidents, but the team is unsure if the data was actually transmitted. Which monitoring and reporting capability would best help confirm the exfiltration?

   • ACheck the user's browser history for the cloud storage service.
   • BUse only the AI guardrail logs to see if the user accessed AI tools.
   • CReview only the DLP incident logs for the user's activity.
   • DCorrelate DLP incident logs with network flow logs to confirm that the data was actually transmitted to the cloud service.
   Reveal Solution Discussion Select an answer first