5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company uses Enterprise SaaS Security to protect data in a cloud-based email service. They need to ensure that emails are encrypted at rest and in transit, and that any attempts to access emails from unauthorized locations are logged and alerted. Which configuration should they implement?

   • AEnable multi-factor authentication (MFA) for all users.
   • BRely on the email provider's default encryption settings.
   • CUse a VPN for all email access.
   • DEnable TLS for email in transit, use customer-managed keys (CMK) for encryption at rest, and configure activity logging with alerts for access from unauthorized locations.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Why is data encryption important for Enterprise SaaS Security?

   • AIt automatically blocks all malicious users from accessing the SaaS application
   • BIt protects sensitive data from unauthorized access even if other security controls fail
   • CIt ensures that data is always available to authorized users
   • DIt eliminates the need for access control policies
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security team is investigating a potential data breach involving sensitive data that was exfiltrated from a cloud application. They have DLP logs, but they need to determine the full scope of the breach, including which data was accessed and whether any data was encrypted. Which approach should they take?

   • AReview only the DLP logs for policy violations.
   • BCheck the SaaS provider's uptime logs.
   • CInterview all users who had access to the data.
   • DCorrelate DLP logs with encryption key usage logs to determine which data was decrypted and accessed.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses Enterprise DLP to protect sensitive data in a cloud repository. They need to ensure that data is encrypted at rest and that DLP can still inspect content for policy violations. They also need to maintain audit logs of all access to the data. Which configuration should they implement?

   • AUse data masking to hide sensitive fields and rely on DLP to inspect masked data.
   • BUse transparent data encryption (TDE) and rely on the database logs for auditing.
   • CEncrypt data with a single key and share the key with all DLP administrators.
   • DUse application-level encryption with a key management service, and configure DLP to decrypt data in a secure inspection environment, with audit logging of all access.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   How do access control mechanisms enforce DLP policies in an enterprise environment?

   • ABy encrypting all data stored in the enterprise
   • BBy granting or denying user permissions to access sensitive data based on defined rules
   • CBy creating backups of sensitive data to prevent loss
   • DBy generating alerts when suspicious activity is detected
   Reveal Solution Discussion Select an answer first