4.4 Configure Data Loss Prevention and AI Guardrails for Secure Internet Access 350-701 Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A manufacturing company wants to protect its intellectual property (IP) by preventing employees from sending CAD files to external email addresses. They also need to allow sending CAD files to a specific engineering partner. Which DLP approach should they use?

   • AEncrypt all emails with CAD files and allow them to any recipient.
   • BOnly monitor emails with CAD files without blocking them.
   • CCreate a DLP rule that detects CAD file types, blocks email transmissions, and adds an exception for the partner's domain.
   • DBlock all outbound email to external addresses.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A law firm uses a DLP solution to protect client data. They need to detect when employees send emails containing social security numbers (SSNs) to external recipients, but they also want to allow emails to a specific external legal partner. Which DLP policy configuration should be used?

   • ABlock all outbound email to external recipients.
   • BEncrypt all emails containing SSNs and send them to any recipient.
   • CCreate a DLP rule that matches SSN patterns, blocks emails to external recipients, and adds an exception for the partner's domain.
   • DOnly monitor emails containing SSNs without blocking them.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which set of components best describes the core functions of a Data Loss Prevention (DLP) solution in a secure internet access context?

   • AFirewall rules, VPN termination, and content caching
   • BAntivirus scanning, sandboxing, and threat intelligence feeds
   • CData identification, policy enforcement, and incident response
   • DUser authentication, single sign-on, and multi-factor authentication
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security operations center (SOC) needs to identify users who repeatedly attempt to upload sensitive data to personal cloud storage and also access AI services. Which monitoring and reporting approach would best support this investigation?

   • AUse only the AI guardrail reports and ignore DLP logs.
   • BGenerate a report that correlates DLP incident logs with AI guardrail access logs by user and time.
   • CEnable email alerts for every DLP incident but do not store them in a central log.
   • DReview only the firewall logs for outbound traffic to personal cloud storage.
   Reveal Solution Discussion Select an answer first