Data Loss Prevention (DLP) CSE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Why is integration with IAM important for a DLP solution?

   • ATo automatically encrypt all data in transit
   • BTo monitor network traffic for suspicious activity
   • CTo identify which user is attempting to access or transfer sensitive data
   • DTo block malware from entering the cloud environment
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An organization wants to create a DLP policy that detects passport numbers in documents stored in OneDrive. They want to block sharing of these documents externally and notify the security team. Which two components must be defined in the policy?

   • AA data classification rule for passport numbers and an action to block external sharing.
   • BAn encryption key and a hashing algorithm.
   • CA user group and a time window for the policy to be active.
   • DA log retention period and a dashboard.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company runs a containerized application on Azure Kubernetes Service (AKS) and stores data in Azure Blob Storage. They need to enforce DLP on data at rest and in transit, but they have limited DevOps resources and want to avoid building custom agents. Which approach best balances control and operational overhead?

   • ADisable public access to Blob Storage and rely on network security groups.
   • BUse Azure Purview (Microsoft Purview) to scan Blob Storage for sensitive data and apply classification labels, while using Azure Policy to enforce encryption for data at rest.
   • CDeploy a sidecar container in each AKS pod that inspects all network traffic and blocks sensitive data.
   • DUse Azure SQL Database's built-in DLP features.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which scenario best illustrates the need for a Data Loss Prevention (DLP) solution in a cloud environment?

   • AA cloud provider experiences a regional outage affecting multiple services
   • BA virtual machine fails to boot due to a misconfigured operating system
   • CA user accidentally shares a confidential customer database with an external email address
   • DA developer forgets to enable multi-factor authentication on a storage account
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company uses a DLP solution that integrates with its IAM system. When a user attempts to access a sensitive file, the DLP checks the user's role and permissions before allowing access. This is an example of which integration?

   • ADLP integrating with CASB to monitor cloud traffic.
   • BDLP integrating with encryption to protect the file.
   • CDLP integrating with SIEM for logging.
   • DDLP integrating with IAM to enforce access decisions based on user context.
   Reveal Solution Discussion Select an answer first