A security team has implemented a new data loss prevention (DLP) system. The CISO wants to verify that the DLP controls are working as intended and meeting the organization's security objectives. Which approach provides the most reliable evidence of control effectiveness?

Conduct a penetration test against the DLP system to identify bypass techniques.

Review the DLP vendor's marketing materials and feature list.

Ask end users if they feel the DLP is working.

Perform a controlled test by sending sample sensitive data through the DLP and verifying it is blocked or flagged.

EC-CouncilCertified Chief Information Security Officer

Domain 2Objective 1

Designing, Deploying, and Managing Security Controls CCISO Practice Questions (Page 11)

Part of the Information Security Controls and Audit Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

7concepts

Questions 51–51

51application · medium
A security team has implemented a new data loss prevention (DLP) system. The CISO wants to verify that the DLP controls are working as intended and meeting the organization's security objectives. Which approach provides the most reliable evidence of control effectiveness?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Designing, Deploying, and Managing Security Controls CCISO Practice Questions (Page 11)

Questions 51–51

A security team has implemented a new data loss prevention (DLP) system. The CISO wants to verify that the DLP controls are working as intended and meeting the organization's security objectives. Which approach provides the most reliable evidence of control effectiveness?

Keep studying — Information Security Controls and Audit Management