A company is experiencing data exfiltration through email and USB drives. They have a DLP solution but it is not catching all incidents. They need to improve detection and prevention without impacting legitimate business workflows. Which approach should they take?

Deploy additional DLP agents on all endpoints and increase logging.

Implement a DLP policy that blocks all external email and disables USB ports on all endpoints.

Use Azure Sentinel to analyze all data access logs and alert on anomalies.

Use sensitivity labels to classify sensitive data, and configure DLP policies to block specific actions like emailing or copying to USB for labeled files.

A healthcare organization is implementing Zero Trust for patient records. They need to ensure that only authorized clinical staff can access records, and access must be denied for non-clinical staff even if they have valid credentials. The organization uses Microsoft 365 and Azure AD. Which approach best meets the requirement?

Implement Azure Information Protection with a custom permission policy that grants read-only access to the 'Clinicians' group and denies all others.

Use Azure AD groups to grant access to patient records and enforce MFA for all group members.

Apply a sensitivity label that encrypts patient records and grants permissions only to the 'Clinicians' group, and configure conditional access to block access for non-clinical users.

Apply sensitivity labels to patient records and configure conditional access policies that require the label to be present for access.

Which of the following is a typical action that a DLP system might take when it detects an attempt to send sensitive data outside the organization?

Ignore the event because it is not a security issue

Block the transmission and alert an administrator

Encrypt the data before it is sent

Automatically delete the data from the source

Which of the following is an example of a contextual factor that a data access control policy might consider?

The brand of the user's web browser

The user's role in the organization

What is the primary purpose of continuous monitoring and logging of data access in a Zero Trust architecture?

To detect anomalies and potential security incidents

To replace the need for access controls

To automatically encrypt all data at rest

To reduce the amount of data stored in the organization

Dell Zero Trust Design

Domain 5Objective 2

Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Part of the Data Centric Zero Trust domain, which accounts for 10% of the ZERO-TRUST-DESIGN exam.

28questions here

6free pages

7concepts

10%of the exam

Questions 16–20

16expert · hard
A company is experiencing data exfiltration through email and USB drives. They have a DLP solution but it is not catching all incidents. They need to improve detection and prevention without impacting legitimate business workflows. Which approach should they take?
Select an answer first
17application · medium
A healthcare organization is implementing Zero Trust for patient records. They need to ensure that only authorized clinical staff can access records, and access must be denied for non-clinical staff even if they have valid credentials. The organization uses Microsoft 365 and Azure AD. Which approach best meets the requirement?
Select an answer first
18foundation · easy
Which of the following is a typical action that a DLP system might take when it detects an attempt to send sensitive data outside the organization?
Select an answer first
19foundation · easy
Which of the following is an example of a contextual factor that a data access control policy might consider?
Select an answer first
20foundation · easy
What is the primary purpose of continuous monitoring and logging of data access in a Zero Trust architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.