A large enterprise uses a DLP solution that monitors email and web traffic. It also uses an MDM solution for corporate-owned smartphones. The security team wants to prevent sensitive data from being exfiltrated via personal cloud storage apps on mobile devices. The DLP solution cannot inspect traffic from mobile apps directly. Which approach should the team take?

Configure the DLP solution to block all traffic to known cloud storage domains

Require users to use a VPN that routes all mobile traffic through the DLP solution

Disable the mobile devices' ability to install any apps

Use MDM to block or restrict the use of personal cloud storage apps on managed devices

A law firm wants to prevent sensitive client information from being shared via email. The DLP administrator is configuring a policy to detect client names and associated case numbers. The data is stored in a structured client database. Which detection technique is most appropriate?

Keyword matching for 'client' and 'case'

Regular expression for case number format

Machine learning classification of email content

Exact data matching against the client database

A company is evaluating BYOD vs COPE for its remote workforce. The workforce uses a mix of personal and corporate devices. The company must balance employee privacy with the need to protect corporate data. The security team has decided to implement MDM with containerization. Which additional control is essential to ensure comprehensive data protection across both BYOD and COPE devices?

Use a VPN for all corporate traffic

Disable all personal apps on corporate devices

Integrate DLP with the MDM to monitor and control data flows from managed apps

Require all employees to use the same device model

What is the purpose of app sandboxing in mobile operating systems?

To allow apps to share data freely

To isolate app data and prevent unauthorized access between apps

To enable apps to run in the background

GIAC Security Essentials

Domain 6Objective 1

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 8)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 36–40

36expert · hard
A large enterprise uses a DLP solution that monitors email and web traffic. It also uses an MDM solution for corporate-owned smartphones. The security team wants to prevent sensitive data from being exfiltrated via personal cloud storage apps on mobile devices. The DLP solution cannot inspect traffic from mobile apps directly. Which approach should the team take?
Select an answer first
37application · medium
A law firm wants to prevent sensitive client information from being shared via email. The DLP administrator is configuring a policy to detect client names and associated case numbers. The data is stored in a structured client database. Which detection technique is most appropriate?
Select an answer first
38expert · hard
A company is evaluating BYOD vs COPE for its remote workforce. The workforce uses a mix of personal and corporate devices. The company must balance employee privacy with the need to protect corporate data. The security team has decided to implement MDM with containerization. Which additional control is essential to ensure comprehensive data protection across both BYOD and COPE devices?
Select an answer first
39foundation · easy
What is the purpose of app sandboxing in mobile operating systems?
Select an answer first
40foundation · easy
Which DLP detection technique is best suited for identifying credit card numbers in a data stream?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 8)

Questions 36–40

A law firm wants to prevent sensitive client information from being shared via email. The DLP administrator is configuring a policy to detect client names and associated case numbers. The data is stored in a structured client database. Which detection technique is most appropriate?

What is the purpose of app sandboxing in mobile operating systems?

Which DLP detection technique is best suited for identifying credit card numbers in a data stream?

Keep studying — Data Protection and Emerging Technologies