3.5 Explain the Function of Data Loss Prevention (DLP) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to protect source code that developers store on their laptops. The security team is concerned about data being copied to USB drives or sent through personal webmail. Which DLP deployment mode should be prioritized to address this specific risk?

   • AEndpoint DLP agents on the laptops
   • BCloud access security broker (CASB) for the webmail service
   • CStorage DLP on the file server
   • DNetwork DLP at the internet gateway
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A multinational company must comply with GDPR and needs to demonstrate that personal data of EU residents is not being sent to unauthorized locations. The compliance team wants automated proof of DLP enforcement. What should the security team configure to meet this requirement?

   • AA manual review process for all outbound emails containing personal data
   • BEncryption of all outbound traffic without inspection
   • CDLP policies that block and log all outbound transfers of EU personal data
   • DEndpoint DLP that only alerts on USB transfers
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A healthcare organization needs to prevent patient medical records from being emailed outside the corporate network. The security team wants to inspect email content for diagnosis codes and patient names before the message is sent. Which DLP approach best meets this requirement?

   • AEnable storage DLP on the mail server to quarantine old emails containing sensitive data
   • BConfigure network DLP at the email gateway to inspect message content and block policy violations
   • CDeploy endpoint DLP agents on all workstations to monitor clipboard and print activity
   • DApply data classification labels manually to each email before sending
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does DLP help an organization meet regulatory compliance requirements?

   • ABy automatically generating compliance reports for auditors
   • BBy enforcing policies that prevent unauthorized access and exfiltration of sensitive data
   • CBy blocking all external email communication
   • DBy encrypting all data stored in the cloud
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is subject to HIPAA and must ensure that protected health information (PHI) is not transmitted outside the organization. The security team wants to enforce this policy automatically. What is the primary benefit of using DLP for this requirement?

   • AIt guarantees that no PHI will ever leave the network
   • BIt replaces the need for encryption of PHI in transit
   • CIt provides automated enforcement and an audit trail for compliance reporting
   • DIt eliminates the need for user training on data handling
   Reveal Solution Discussion Select an answer first