A large enterprise has data stored in on-premises file servers, SharePoint Online, and various SaaS applications. They need to discover all instances of personally identifiable information (PII) and apply consistent protection. The enterprise uses Microsoft 365 and has Azure Information Protection (AIP) available. What is the most efficient approach?

Use Microsoft Purview Data Map to scan all sources, and apply auto-labeling policies to classify and protect PII.

Deploy a data loss prevention (DLP) solution to block PII from being transmitted, and rely on it to also discover PII.

Use the AIP scanner to scan on-premises file servers and SharePoint Online, and manually classify data in SaaS applications.

Use a third-party discovery tool that only scans on-premises data, and then export the results to a spreadsheet.

GIAC Defensible Security Architect

Domain 4Objective 2

Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 11)

Part of the Data Protection and Governance domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

8concepts

Questions 51–51

51expert · hard
A large enterprise has data stored in on-premises file servers, SharePoint Online, and various SaaS applications. They need to discover all instances of personally identifiable information (PII) and apply consistent protection. The enterprise uses Microsoft 365 and has Azure Information Protection (AIP) available. What is the most efficient approach?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

Data Discovery, Governance, and Mobility Management GDSA Practice Questions (Page 11)

Questions 51–51

Keep studying — Data Protection and Governance