Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a benefit of integrating DLP with mobile device management?

   • AIt automatically installs all available app updates
   • BIt provides a unified approach to enforcing data protection policies across endpoints
   • CIt eliminates the need for user authentication on mobile devices
   • DIt allows employees to use any personal device without restrictions
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary role of Mobile Device Management (MDM) in an organization?

   • ATo provide cellular network coverage for employees
   • BTo replace the need for antivirus software on mobile devices
   • CTo develop mobile applications for internal use
   • DTo enforce security policies and manage devices centrally
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company uses a COPE model for its employees' smartphones. The devices contain both corporate and personal data. An employee leaves the company. The IT department needs to ensure corporate data is removed while preserving the employee's personal data. Which approach should be used?

   • ARemove the device from MDM without wiping
   • BAsk the employee to manually delete corporate apps and data
   • CPerform a selective wipe of the corporate container via MDM
   • DPerform a full factory reset of the device
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses an MDM to manage employee smartphones and a DLP solution for email and web traffic. Employees often email corporate documents to personal accounts and then access them from personal devices. Which integration would best prevent this data exfiltration?

   • AConfigure DLP to block emails to personal domains and require MDM-managed devices for corporate email access
   • BUse MDM to wipe personal devices that receive corporate email
   • CDisable email on all mobile devices
   • DRely on DLP to encrypt all outbound email
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A DLP alert is triggered when an employee attempts to send a spreadsheet containing customer PII to a personal email address. The DLP policy is set to 'notify user' but not block. The security team is concerned that employees are ignoring the notifications. What is the most effective way to improve compliance without disrupting legitimate business?

   • AQuarantine all emails containing PII for manual review
   • BChange the policy to block all emails containing PII to personal domains
   • CIncrease the frequency of user training on DLP policies
   • DImplement a 'justification' workflow where the user must provide a business reason to override the block
   Reveal Solution Discussion Select an answer first