4.4 Configure Data Loss Prevention and AI Guardrails for Secure Internet Access 350-701 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a key benefit of integrating DLP with a secure internet access solution for cloud applications?

   • AIt automatically encrypts all data stored in the cloud
   • BIt eliminates the need for any other security controls
   • CIt allows DLP policies to be applied to data as it is uploaded to or downloaded from cloud apps
   • DIt provides a backup of all cloud application data
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A retail company needs to demonstrate compliance with PCI DSS by showing that credit card data is not being transmitted to unauthorized external destinations. Which monitoring and reporting capability should they use?

   • ADisable DLP logging to reduce storage costs.
   • BGenerate regular DLP incident reports that detail blocked and allowed transmissions of credit card data.
   • CUse only the AI guardrail reports to show compliance.
   • DReview firewall logs for outbound connections to known bad IP addresses.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company uses a secure internet access solution that includes a cloud access security broker (CASB). They want to enforce DLP policies on files stored in Box and prevent users from sharing sensitive files externally. Which integration should they use?

   • AUse the CASB's API-based DLP to scan files in Box and block external sharing when sensitive data is detected.
   • BOnly monitor Box activity without any enforcement.
   • CUse a network-level DLP rule that blocks all traffic to Box.
   • DDisable Box external sharing at the tenant level.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A healthcare organization uses a secure internet access (SIA) gateway to inspect all outbound web traffic. The compliance team requires that any document containing a patient's medical record number (MRN) be blocked from upload to personal webmail, but the same document may be sent to a partner's secure portal. The MRN format is 'MRN-' followed by 8 digits. Which DLP policy configuration best meets this requirement?

   • ACreate a custom data pattern for MRNs, apply it to a policy that blocks uploads to webmail, and add an allow exception for the partner portal domain.
   • BBlock all file uploads to webmail and require user justification for every blocked attempt.
   • CUse a predefined HIPAA data pattern and block all uploads to any external web destination.
   • DEncrypt all outbound documents containing MRNs and allow them to proceed to any destination.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   When configuring AI guardrails to control access to AI services, which of the following is a typical configuration element?

   • AA list of allowed or blocked AI service domains or applications
   • BA configuration to change the AI service's API key
   • CA rule to increase the AI model's temperature setting
   • DA setting to enable automatic AI model retraining
   Reveal Solution Discussion Select an answer first