Apply Data Centric Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A multinational company wants to ensure that data-centric policies are enforced consistently across on-premises file servers, cloud storage, and SaaS applications. They use Microsoft 365 and have on-premises Windows servers. Which approach should they take?

   • AUse separate DLP policies for on-premises and cloud environments.
   • BImplement a third-party DLP solution that covers all environments.
   • CDeploy Azure Information Protection (AIP) scanner to classify and label files on-premises, and use sensitivity labels in Microsoft 365 for cloud data.
   • DMigrate all data to Azure and use Azure Information Protection for all data.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of applying persistent protections such as watermarking to sensitive data?

   • ATo track the source of a data leak and deter unauthorized sharing
   • BTo make the data unreadable without a decryption key
   • CTo compress the data to reduce storage costs
   • DTo automatically delete data after a certain time
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A security analyst needs to investigate a potential data exfiltration incident. They need to see a timeline of who accessed sensitive files, from which device, and what actions were taken. Which logs should they review?

   • AAzure Monitor metrics for storage accounts.
   • BAzure AD sign-in logs and audit logs for SharePoint and OneDrive.
   • CWindows Event Logs from client devices.
   • DMicrosoft Defender for Cloud security alerts.
   Reveal Solution Discussion Select an answer first