Data Loss Prevention (DLP) CSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a key component of a DLP policy?

   • AUser roles, permissions, and password policies
   • BFirewall rules, VPN configuration, and routing tables
   • CData classification, rules, and actions
   • DEncryption algorithms, key lengths, and hashing functions
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's DLP policy for 'Confidential' data specifies the following actions: block external sharing, notify the user, and log the incident. An employee attempts to share a Confidential document via a public link in SharePoint. What should the DLP policy do?

   • AQuarantine the document and notify the user.
   • BBlock the creation of the public link, notify the user, and log the incident.
   • CAllow the public link but encrypt the document.
   • DBlock the public link and require the user to request an exception.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of classifying data in a DLP solution?

   • ATo reduce the storage cost of cloud data
   • BTo assign labels that help apply appropriate protection and handling rules
   • CTo determine the geographic location of data centers
   • DTo improve the performance of cloud applications
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of the quarantine action in a DLP policy?

   • ATo encrypt the data so that only authorized users can access it
   • BTo isolate the data or message for further inspection and potential release
   • CTo notify the user that their action was successful
   • DTo immediately delete the sensitive data from the system
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's DLP solution generates a high volume of alerts, most of which are false positives. The security team is overwhelmed and misses a real incident. The team wants to improve the alert quality without reducing the coverage of sensitive data types. What should the administrator do first?

   • AAdd more sensitive data types to the policy to improve detection accuracy.
   • BIncrease the alert severity level so that only critical alerts are sent to the team.
   • CDisable the DLP policy and re-enable it after a week to reset the alert volume.
   • DRefine the DLP policy rules by adjusting confidence thresholds and adding context-based conditions (e.g., user, location, device).
   Reveal Solution Discussion Select an answer first