7.3 Analyze and Architect to Enterprise DLP Functionality NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   A DLP administrator is configuring policies and needs to categorize data types such as credit card numbers, passport numbers, and proprietary formulas. Which component of Enterprise DLP is responsible for identifying these categories?

   • AOCR
   • BClassifiers
   • CPolicies
   • DEndpoints
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A DLP administrator needs to detect both credit card numbers in text and credit card numbers in scanned images. Which combination of DLP features should they use?

   • AEDM and IDM
   • BOCR and IDM
   • CML classification and EDM
   • DRegex classifiers and OCR
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm wants to prevent employees from copying customer account numbers to USB drives or sending them via personal webmail from their laptops. They already have network DLP in place. What should they add to cover these endpoints?

   • AEndpoint DLP
   • BIndexed Document Matching (IDM)
   • CMore regex classifiers
   • DAdditional network DLP policies
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare organization must prevent patient records from leaving the network. They have a structured database of patient IDs and birth dates. They also need to detect generic credit card numbers in emails. Which DLP approach should they use to meet both requirements with the least false positives?

   • AUse ML classification for both patient IDs and credit card numbers
   • BUse IDM for patient IDs and ML classification for credit card numbers
   • CUse regex classifiers for both patient IDs and credit card numbers
   • DUse EDM for patient IDs and regex for credit card numbers
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a key advantage of ML-based classification over traditional pattern matching?

   • AIt is faster than any other classification method
   • BIt eliminates all false positives
   • CIt requires no training data
   • DIt can identify sensitive data that does not follow a fixed format
   Reveal Solution Discussion Select an answer first