An organization uses a cloud-based DLP service for email and web traffic. It also uses an MDM solution for mobile devices. The security team wants to ensure that sensitive documents downloaded to mobile devices are protected even when the device is offline. Which integration approach should be used?

Rely on the DLP service to block all downloads to mobile devices

Use the MDM to require the device to be online before opening any corporate document

Configure the MDM to enforce device encryption and require a PIN, and use a secure container for corporate documents

Use the DLP service to scan documents only when they are uploaded to the cloud

A healthcare organization's DLP system flags an email containing a patient's protected health information (PHI) sent by a nurse to a personal email address. The organization's policy requires that PHI never leave the corporate network. The DLP administrator must configure the response action for this rule. What is the most appropriate response action?

Allow the email and log the event for auditing

Quarantine the email for manual review by the security team

Block the email and notify the nurse with a justification link

Encrypt the email and deliver it to the personal address

A company's mobile devices are being targeted by a sophisticated phishing campaign that uses SMS messages with links to fake login pages. Several employees have entered their credentials. The MDM administrator needs to mitigate the risk. Which combination of actions is most effective?

Install a mobile antivirus app on all devices

Block SMS messages from unknown numbers on all devices

Disable mobile email access until the campaign ends

Force a password reset for affected users and enable multi-factor authentication (MFA) on corporate accounts

A company's mobile app development team is creating an enterprise app that handles sensitive customer data. The security team wants to ensure the app follows mobile application security best practices. Which practice is most important to implement?

Minimize permissions to only what the app requires

Use a third-party analytics SDK to track user behavior

Allow the app to run in the background continuously

Store data in plain text for performance

GIAC Security Essentials

Domain 6Objective 1

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 9)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 41–45

41application · medium
An organization uses a cloud-based DLP service for email and web traffic. It also uses an MDM solution for mobile devices. The security team wants to ensure that sensitive documents downloaded to mobile devices are protected even when the device is offline. Which integration approach should be used?
Select an answer first
42application · medium
A healthcare organization's DLP system flags an email containing a patient's protected health information (PHI) sent by a nurse to a personal email address. The organization's policy requires that PHI never leave the corporate network. The DLP administrator must configure the response action for this rule. What is the most appropriate response action?
Select an answer first
43foundation · easy
Which MDM capability allows an administrator to erase all data from a lost or stolen device?
Select an answer first
44expert · hard
A company's mobile devices are being targeted by a sophisticated phishing campaign that uses SMS messages with links to fake login pages. Several employees have entered their credentials. The MDM administrator needs to mitigate the risk. Which combination of actions is most effective?
Select an answer first
45application · medium
A company's mobile app development team is creating an enterprise app that handles sensitive customer data. The security team wants to ensure the app follows mobile application security best practices. Which practice is most important to implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Data Loss Prevention and Mobile Device Security GSEC Practice Questions (Page 9)

Questions 41–45

Which MDM capability allows an administrator to erase all data from a lost or stolen device?

A company's mobile devices are being targeted by a sophisticated phishing campaign that uses SMS messages with links to fake login pages. Several employees have entered their credentials. The MDM administrator needs to mitigate the risk. Which combination of actions is most effective?

A company's mobile app development team is creating an enterprise app that handles sensitive customer data. The security team wants to ensure the app follows mobile application security best practices. Which practice is most important to implement?

Keep studying — Data Protection and Emerging Technologies