Data Loss Prevention (DLP) CSE Practice Questions (Page 11)

Questions 51–52

1. 51application · medium

   A healthcare organization uses Microsoft 365 and stores patient records in SharePoint Online. The compliance team wants to prevent users from accidentally sharing files containing Social Security Numbers (SSNs) with external parties, but they still need to allow internal sharing. They also want to be notified when a violation occurs. What should the DLP administrator configure?

   • AA sensitivity label that encrypts all files with SSNs and requires the compliance team to approve every share.
   • BA conditional access policy that blocks external users from accessing SharePoint Online.
   • CA retention policy that deletes any file containing SSNs after 30 days.
   • DA DLP policy that detects SSNs, blocks external sharing, allows internal sharing, and sends an alert to the compliance team.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A company runs a custom application on Azure VMs (IaaS) that processes financial data. The security team wants to prevent sensitive data from being exfiltrated via outbound network traffic. Which DLP enforcement technique is most appropriate for this IaaS environment?

   • AConfigure Azure Security Center to block all outbound traffic from the VM.
   • BDeploy a network-based DLP solution or a web proxy that inspects outbound traffic for sensitive patterns.
   • CUse Azure SQL Database's built-in DLP to monitor queries.
   • DEnable Azure Information Protection to automatically label and encrypt all files.
   Reveal Solution Discussion Select an answer first