Data Loss Prevention (DLP) Concepts NDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of Personally Identifiable Information (PII) that a DLP solution would typically protect?

   • ASocial Security number
   • BProduct source code
   • CCompany financial statements
   • DMarketing brochures
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization wants to prevent credit card data from being sent via fax. The DLP system only monitors email and web traffic. What is the most effective way to extend protection to fax transmissions?

   • AAdd a keyword rule for 'fax' to the email DLP policy
   • BRely on the existing email DLP to catch fax-related emails
   • CDeploy a network DLP sensor on the fax server's network segment
   • DInstall endpoint DLP on the fax machine
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company's DLP policy flags any email containing the word 'confidential' in the subject line. Employees frequently use that word in routine messages, causing a high volume of alerts that desensitizes the security team. Which policy change best reduces false positives while maintaining protection?

   • ADisable the policy and rely on user training
   • BChange the keyword to 'internal use only'
   • CIncrease the alert severity so the team pays more attention
   • DRequire both the keyword and a data pattern such as a customer account number
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A DLP administrator is configuring a policy to detect credit card numbers in outbound traffic. The policy is generating many false positives because it matches any 16-digit number. The administrator wants to reduce false positives without missing real credit card numbers. Which approach is most effective?

   • AUse Luhn algorithm validation in the detection rule
   • BUse keyword matching for 'credit card'
   • CDisable the policy during business hours
   • DIncrease the minimum length to 20 digits
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A hospital is implementing DLP to protect patient records. The DLP solution must detect when patient names and medical record numbers are included in outbound emails. Which types of data should the DLP policy be configured to identify?

   • AFinancial data and intellectual property
   • BPHI and PII
   • CPII only
   • DPHI only
   Reveal Solution Discussion Select an answer first