Data Loss Prevention (DLP) CSE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A DLP policy detects a user copying sensitive customer data to a USB drive. The organization wants to prevent this action but also wants to allow the user to save the data to an encrypted corporate drive. Which enforcement action should be configured?

   • AEncrypt the data on the USB drive and allow the copy.
   • BAlert the user and allow the copy.
   • CBlock all copy operations to any external storage.
   • DBlock the copy to USB drives but allow the copy to encrypted corporate drives.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   After a data breach, a company's incident response team needs to determine which users accessed sensitive files and whether any DLP policy violations occurred in the last 90 days. The DLP solution is integrated with a SIEM. What is the most efficient way to gather this information?

   • AReview the DLP policy configuration to see if it was correctly set up.
   • BAsk the cloud provider for access logs of the storage service.
   • CInterview all employees who have access to the sensitive files.
   • DQuery the SIEM for DLP alerts and user activity logs related to the sensitive files.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A DLP policy detects a user attempting to email a spreadsheet containing customer credit card numbers to a personal email address. The compliance team wants to prevent the email from being sent, but they also want to preserve the email for investigation. Which enforcement action should be configured?

   • ASend an alert to the user and allow the email.
   • BBlock the email and quarantine it for review.
   • CEncrypt the email and allow it to be sent.
   • DLog the event and allow the email.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is the primary purpose of Data Loss Prevention (DLP) in a cloud environment?

   • ATo encrypt all data stored in the cloud to ensure confidentiality
   • BTo manage user identities and access permissions across cloud services
   • CTo monitor and protect sensitive data from unauthorized access, exfiltration, or leakage
   • DTo detect and block malware infections in cloud workloads
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   How does DLP implementation typically differ between SaaS and IaaS?

   • AIn SaaS, DLP is often provided as a built-in feature; in IaaS, the customer must deploy and manage DLP tools themselves
   • BDLP implementation is identical across all cloud service models
   • CIn SaaS, the customer must install DLP agents on every endpoint; in IaaS, DLP is automatically applied to all data
   • DDLP is not applicable to SaaS because the provider controls all data
   Reveal Solution Discussion Select an answer first