A healthcare organization must prevent patient health information (PHI) from being transmitted via unencrypted email. They want to allow encrypted email to proceed, but block unencrypted PHI and notify the sender. Which response action should be configured in the DLP policy?

Allow the message and log it for review

Quarantine the message and silently drop it

Block the message and send a notification to the sender

Encrypt the message automatically and deliver it

A company has a hybrid environment: on-premises file servers, Microsoft 365 email, and a custom SaaS application. The security team wants a single DLP solution to cover all three. They have limited budget and cannot deploy agents on every endpoint. Which deployment strategy best meets the requirement?

Use only network DLP at the internet gateway for all data flows

Use storage DLP on the on-premises file servers and ignore cloud services

Deploy endpoint DLP on all workstations and use it for all three environments

Use cloud DLP for Microsoft 365 and the SaaS app, plus network DLP for on-premises file access

Which type of data is specifically protected under health privacy regulations like HIPAA and is a focus of DLP?

Protected Health Information (PHI)

EC-CouncilNetwork Defense Essentials

Domain 6Objective 5

Data Loss Prevention (DLP) Concepts NDE Practice Questions (Page 7)

Part of the Cryptography, PKI, and Data Security domain, which makes up ~15% of our current practice bank.

49questions here

10free pages

8concepts

Questions 31–35

31application · medium
A healthcare organization must prevent patient health information (PHI) from being transmitted via unencrypted email. They want to allow encrypted email to proceed, but block unencrypted PHI and notify the sender. Which response action should be configured in the DLP policy?
Select an answer first
32expert · hard
A company has a hybrid environment: on-premises file servers, Microsoft 365 email, and a custom SaaS application. The security team wants a single DLP solution to cover all three. They have limited budget and cannot deploy agents on every endpoint. Which deployment strategy best meets the requirement?
Select an answer first
33foundation · easy
Which type of data is specifically protected under health privacy regulations like HIPAA and is a focus of DLP?
Select an answer first
34application · medium
A retail company is deploying DLP and wants to protect customer credit card numbers and also detect when employees upload proprietary pricing algorithms to personal cloud storage. Which types of data should the DLP policies be configured to identify?
Select an answer first
35foundation · easy
Which of the following is a typical response action in a DLP policy when a violation is detected?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Data Loss Prevention (DLP) Concepts NDE Practice Questions (Page 7)

Questions 31–35

A healthcare organization must prevent patient health information (PHI) from being transmitted via unencrypted email. They want to allow encrypted email to proceed, but block unencrypted PHI and notify the sender. Which response action should be configured in the DLP policy?

Which type of data is specifically protected under health privacy regulations like HIPAA and is a focus of DLP?

A retail company is deploying DLP and wants to protect customer credit card numbers and also detect when employees upload proprietary pricing algorithms to personal cloud storage. Which types of data should the DLP policies be configured to identify?

Which of the following is a typical response action in a DLP policy when a violation is detected?

Keep studying — Cryptography, PKI, and Data Security