5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A legal firm uses Enterprise DLP to protect confidential client documents. They need to ensure that if a document is accidentally shared externally, the content remains unreadable. Which encryption strategy should they employ?

   • AUse data masking to hide sensitive fields in documents.
   • BApply a digital signature to all documents.
   • CEncrypt documents with a key that is not shared externally, and use DLP to block external sharing of unencrypted content.
   • DRely on the DLP solution to quarantine any externally shared documents.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's DLP solution flagged a potential data exfiltration event. The security team needs to determine who accessed the sensitive data, when, and from which device. Which monitoring and logging capability is most essential for this investigation?

   • ASystem performance logs tracking CPU and memory usage on DLP servers.
   • BNetwork flow logs showing traffic volumes between internal and external hosts.
   • CBackup logs confirming that data was successfully backed up.
   • DDetailed audit logs capturing user identity, timestamp, and source device for every data access event.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How are access control policies typically managed in Enterprise SaaS environments?

   • ABy configuring each SaaS application independently without central oversight
   • BThrough a centralized security platform that integrates with identity providers and SaaS applications
   • CBy encrypting all user credentials and access tokens
   • DBy using network firewalls to restrict access to SaaS applications
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to detect if a user's account in a SaaS application has been compromised by monitoring for unusual activity, such as login from a new location or mass data export. Which monitoring and logging capability is most important?

   • ASystem uptime logs for the SaaS application.
   • BNetwork traffic logs showing total bandwidth usage.
   • CUser activity logs that capture login location, device, and data export events, with alerts for anomalies.
   • DConfiguration change logs for the SaaS application.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In an Enterprise DLP configuration, what is the primary role of data encryption?

   • ATo ensure that sensitive data remains unreadable if it is intercepted or accessed without authorization
   • BTo block all outbound network traffic containing sensitive data
   • CTo provide an audit trail of who accessed sensitive data
   • DTo identify and classify sensitive data based on its content
   Reveal Solution Discussion Select an answer first