A company is implementing a DLP program for the first time. The goal is to protect intellectual property (source code) from being exfiltrated by insiders. Which initial step should the DLP team take?

Train employees on DLP policies before deploying any technology

Purchase a DLP solution and install it in monitor-only mode

Identify and classify the sensitive data and define DLP policies based on business requirements

Deploy DLP agents to all endpoints and enable blocking for all outbound traffic

What is the purpose of user notification in a DLP response?

To log the user out of the application

To encrypt the data before it is sent

To automatically delete the sensitive data from the user's device

To inform the user that their action may violate policy and provide guidance

A user reports that their corporate smartphone is behaving erratically, with unusual data usage and pop-up ads. The MDM console shows that the device has a profile installed that the user did not recognize. What is the most likely threat and the immediate response?

The device has a configuration error; re-enroll the device in MDM

The device is experiencing a phishing attack; change the user's password

The device is suffering from a denial-of-service attack; reboot the device

The device is infected with malware; quarantine the device and perform a security scan

A company is deploying corporate-owned tablets to field workers. The tablets will access a custom business application that stores sensitive customer data locally. The security team wants to ensure that if a tablet is lost, the data cannot be accessed. Which combination of MDM controls should be implemented?

Enroll the device in MDM and set a policy to remotely lock the device after 30 days of inactivity

Require a complex password and disable the camera

Enable full-disk encryption and configure the device to auto-wipe after 10 failed unlock attempts

Use a secure container for the business app and require the user to log in each time

GIAC Security Essentials

Domain 6Objective 1

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 1)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 1–5

1application · medium
A company is implementing a DLP program for the first time. The goal is to protect intellectual property (source code) from being exfiltrated by insiders. Which initial step should the DLP team take?
Select an answer first
2foundation · easy
What is the purpose of user notification in a DLP response?
Select an answer first
3application · medium
A user reports that their corporate smartphone is behaving erratically, with unusual data usage and pop-up ads. The MDM console shows that the device has a profile installed that the user did not recognize. What is the most likely threat and the immediate response?
Select an answer first
4application · medium
A company is deploying corporate-owned tablets to field workers. The tablets will access a custom business application that stores sensitive customer data locally. The security team wants to ensure that if a tablet is lost, the data cannot be accessed. Which combination of MDM controls should be implemented?
Select an answer first
5foundation · easy
Which mobile device threat involves tricking a user into revealing credentials or installing malicious software?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 1)

Questions 1–5

A company is implementing a DLP program for the first time. The goal is to protect intellectual property (source code) from being exfiltrated by insiders. Which initial step should the DLP team take?

What is the purpose of user notification in a DLP response?

A user reports that their corporate smartphone is behaving erratically, with unusual data usage and pop-up ads. The MDM console shows that the device has a profile installed that the user did not recognize. What is the most likely threat and the immediate response?

Which mobile device threat involves tricking a user into revealing credentials or installing malicious software?

Keep studying — Data Protection and Emerging Technologies