3.5 Explain the Function of Data Loss Prevention (DLP) CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A financial institution must prevent customer account numbers from being emailed externally, but it also needs to allow legitimate transfers to a trusted partner. The security team is configuring DLP enforcement. What is the most appropriate approach?

   • AEncrypt all emails containing account numbers
   • BQuarantine all emails containing account numbers for 24 hours
   • CBlock all emails containing account numbers and require manual review for exceptions
   • DAllow emails to the trusted partner and block all other external recipients
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario best illustrates the role of DLP in protecting sensitive data?

   • AA firewall blocks a known malicious IP address from reaching the internal network
   • BAn antivirus program quarantines a file containing a known virus
   • CA VPN encrypts traffic between a remote worker and the corporate network
   • DA security team receives an alert when a user attempts to email a file containing credit card numbers to a personal address
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which DLP deployment mode is specifically designed to monitor and protect data that is stored on file servers, databases, and cloud storage?

   • ACloud DLP
   • BEndpoint DLP
   • CStorage DLP
   • DNetwork DLP
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is considering deploying DLP to protect customer data. The security team is evaluating whether to use network DLP or endpoint DLP. Which factor is most important in this decision?

   • AThe type of operating system used on employee devices
   • BThe number of users in the organization
   • CThe cost of the DLP solution
   • DThe primary location of the sensitive data and the exfiltration paths that need to be monitored
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company must comply with both GDPR and internal policies that prohibit sharing employee personal data with third parties. The security team is configuring DLP. What is the most important consideration when setting up the DLP policies?

   • AEnsuring DLP policies are the same for all types of sensitive data
   • BDeploying DLP only on the network perimeter
   • CConfiguring DLP to only alert on policy violations
   • DAligning DLP policies with both regulatory requirements and internal data handling policies
   Reveal Solution Discussion Select an answer first