A sales team uses company-issued laptops and smartphones to access a CRM with customer data. A laptop is stolen from an employee's car. The IT department needs to ensure that the data on the device cannot be accessed. Which combination of controls should be in place?

Data loss prevention agent that blocks USB transfers

Screen lock and remote wipe capability

Antivirus software and a firewall

Full-disk encryption and a strong BIOS password

Which scenario best illustrates the purpose of a DLP system?

A firewall blocks an incoming connection attempt from an unknown external IP address

A user attempts to email a spreadsheet containing customer credit card numbers to a personal account, and the email is blocked

An antivirus program quarantines a malicious executable downloaded from the internet

A user is required to enter a one-time password to access a corporate application

An organization is deploying tablets to executives. The tablets will access confidential board documents. The security team wants to ensure that if a tablet is lost, the documents cannot be accessed and the device can be remotely wiped. Which MDM policy configuration is most appropriate?

Require device encryption, enforce a strong passcode, and enable remote wipe

Disable the camera and require a VPN for all traffic

Use containerization to separate personal and corporate data

Enforce a screen timeout and require manual wipe by the user

A DLP solution is configured to detect credit card numbers using regex and Luhn validation. The security team is receiving a high volume of false positives from emails that contain test credit card numbers (e.g., 4111111111111111). These test numbers are used by the QA team and should not be blocked. What is the best way to reduce false positives without weakening the detection of real card numbers?

Change the regex pattern to require a specific prefix for credit card numbers

Increase the minimum length of the card number to 16 digits

Disable Luhn validation to reduce false positives

Add a rule exception that excludes known test card numbers from the DLP policy

GIAC Security Essentials

Domain 6Objective 1

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 3)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 11–15

11application · medium
A sales team uses company-issued laptops and smartphones to access a CRM with customer data. A laptop is stolen from an employee's car. The IT department needs to ensure that the data on the device cannot be accessed. Which combination of controls should be in place?
Select an answer first
12foundation · easy
Which scenario best illustrates the purpose of a DLP system?
Select an answer first
13application · medium
An organization is deploying tablets to executives. The tablets will access confidential board documents. The security team wants to ensure that if a tablet is lost, the documents cannot be accessed and the device can be remotely wiped. Which MDM policy configuration is most appropriate?
Select an answer first
14expert · hard
A DLP solution is configured to detect credit card numbers using regex and Luhn validation. The security team is receiving a high volume of false positives from emails that contain test credit card numbers (e.g., 4111111111111111). These test numbers are used by the QA team and should not be blocked. What is the best way to reduce false positives without weakening the detection of real card numbers?
Select an answer first
15foundation · easy
Which DLP response action prevents a data transfer from occurring while still allowing the user to continue working?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 3)

Questions 11–15

A sales team uses company-issued laptops and smartphones to access a CRM with customer data. A laptop is stolen from an employee's car. The IT department needs to ensure that the data on the device cannot be accessed. Which combination of controls should be in place?

Which scenario best illustrates the purpose of a DLP system?

An organization is deploying tablets to executives. The tablets will access confidential board documents. The security team wants to ensure that if a tablet is lost, the documents cannot be accessed and the device can be remotely wiped. Which MDM policy configuration is most appropriate?

Which DLP response action prevents a data transfer from occurring while still allowing the user to continue working?

Keep studying — Data Protection and Emerging Technologies