5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to ensure that only employees in the HR department can access employee PII stored in a cloud application. They also want to prevent HR employees from copying the data to personal devices. Which access control and DLP measures should they implement?

   • AConfigure role-based access control (RBAC) to restrict access to HR users, and use DLP policies to block data transfer to personal devices.
   • BMonitor user activity and revoke access after a violation.
   • CEncrypt the data and provide the encryption key to all employees.
   • DUse multi-factor authentication (MFA) for all employees.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Enterprise SaaS Security, how is data encryption typically applied to protect data within SaaS applications?

   • ABy using network firewalls to encrypt all traffic between users and the SaaS application
   • BBy relying solely on the SaaS provider's physical security controls
   • CBy encrypting data both in transit and at rest using encryption keys managed by the SaaS provider or customer
   • DBy encrypting only data that is classified as highly sensitive
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization uses Enterprise SaaS Security to manage access to a cloud-based HR system. They need to ensure that employees can only access their own records, and that any access to other employees' records is blocked and logged. Which configuration should they implement?

   • ARely on the SaaS provider's default privacy settings.
   • BConfigure access policies that restrict users to their own records, and enable audit logging for all access attempts.
   • CUse a shared account for all employees to access the HR system.
   • DEncrypt all records and provide the encryption key to all employees.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team needs to prove to auditors that DLP policies are being enforced and that no unauthorized data access has occurred. Which monitoring and logging practice is most critical?

   • AMaintaining immutable audit logs of all DLP policy violations and access attempts.
   • BConfiguring real-time alerts for all DLP events.
   • CStoring logs in a centralized SIEM for 30 days.
   • DGenerating weekly reports of DLP policy changes.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of monitoring and logging in Enterprise DLP?

   • ATo encrypt sensitive data before it is transmitted
   • BTo detect and audit data loss prevention activities and incidents
   • CTo automatically block all unauthorized access attempts
   • DTo classify data based on its sensitivity
   Reveal Solution Discussion Select an answer first