5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which scenario best illustrates how data encryption helps prevent data loss in an Enterprise DLP deployment?

   • AAn administrator reviews logs to see which user accessed a sensitive file
   • BA DLP policy blocks an email with a credit card number from being sent outside the organization
   • CA DLP scanner identifies a file containing personally identifiable information (PII)
   • DA laptop containing encrypted sensitive files is stolen, and the thief cannot read the files without the decryption key
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial firm is deploying Enterprise DLP to protect sensitive financial documents. They want to ensure that only senior analysts can access files containing 'confidential' labels, and that any access attempts are logged for audit. Which combination of controls should they implement?

   • AConfigure DLP policies based on file labels and integrate with identity provider for role-based access, enabling audit logging for all access attempts.
   • BEncrypt all files with a single key and share the key with all employees.
   • CImplement network segmentation to isolate financial documents and rely on firewall logs.
   • DUse static data masking on all files and grant all employees read access to masked data.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst needs to detect unusual user behavior in a SaaS application, such as a user downloading a large volume of data outside business hours. Which monitoring and logging approach would best support this detection?

   • AReview login logs once a month to identify suspicious accounts.
   • BEnable activity logging for all user actions and configure alerts for anomalies like large downloads outside business hours.
   • CRely on the SaaS provider's default security alerts.
   • DUse network firewall logs to monitor traffic to the SaaS provider.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses Enterprise SaaS Security to protect data in a cloud-based collaboration tool. They want to ensure that data is encrypted at rest with keys managed by the company, and that only authorized users can access the data. Which configuration should they implement?

   • AEnable customer-managed keys (CMK) for the SaaS application and configure access policies based on user groups.
   • BEnable multi-factor authentication (MFA) for all users.
   • CUse the SaaS provider's default encryption and rely on user training.
   • DImplement a VPN for all access to the collaboration tool.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company uses Enterprise SaaS Security to manage access to a cloud-based file-sharing service. They want to enforce that only users in the 'Finance' group can access files in the 'Budget' folder, and that any unauthorized access attempts are logged. Which configuration should they implement?

   • ACreate a DLP policy that blocks access to the 'Budget' folder for users not in the 'Finance' group, and enable audit logging for access attempts.
   • BRely on the SaaS provider's default sharing settings.
   • CEncrypt the 'Budget' folder and share the encryption key with all users.
   • DMonitor user activity logs and manually revoke access after a violation.
   Reveal Solution Discussion Select an answer first