3.5 Explain the Function of Data Loss Prevention (DLP) CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An organization needs to detect when a specific confidential merger agreement document is shared externally. The document is stored in multiple locations and may be renamed or slightly edited. Which DLP detection method is most effective for identifying this exact document?

   • AContextual analysis of the sender's email address
   • BDocument fingerprinting based on unique content patterns
   • CExact file hashing of the original document
   • DKeyword matching for the word 'merger' in outbound traffic
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   When a DLP policy violation is detected, which action would be most appropriate if the organization wants to allow the data transfer but ensure it is protected during transmission?

   • AQuarantine the data
   • BEncrypt the data
   • CAlert the security team
   • DBlock the transfer
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which DLP enforcement action prevents a data transfer from occurring while still allowing the user to continue other work?

   • AEncrypting
   • BBlocking
   • CQuarantining
   • DAlerting
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which DLP deployment mode is best suited to monitor data as it traverses the network, such as emails and web uploads?

   • AStorage DLP
   • BEndpoint DLP
   • CDatabase DLP
   • DNetwork DLP
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A financial firm must comply with PCI DSS and prevent credit card numbers from being transmitted via web uploads. The security team wants to allow employees to submit the data to the internal payment system but block it from going to any external website. What DLP enforcement action should be configured?

   • ABlock the transmission and generate an alert to the security team
   • BEncrypt the data before it leaves the network
   • CLog the event without taking any action
   • DQuarantine the data and require an administrator to release it
   Reveal Solution Discussion Select an answer first