5.3 Explain the Function of Data Encryption, Access Control, and Monitoring and Logging in the Configuration and Maintenance of Enterprise DLP and Enterprise SaaS Security NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 6)

Questions 26–27

1. 26expert · hard

   A security team needs to detect and respond to a potential insider threat in a SaaS application where an employee is downloading large amounts of sensitive data. They have DLP and access logs, but they need to determine if the data was encrypted before exfiltration. Which monitoring and logging approach would best support this investigation?

   • ACorrelate DLP logs with encryption key usage logs to determine if the downloaded data was decrypted.
   • BCheck the SaaS provider's performance logs.
   • CReview only the DLP logs for policy violations.
   • DInterview the employee to understand their actions.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In Enterprise DLP, what is the primary purpose of access control mechanisms?

   • ATo restrict who can view, modify, or transmit sensitive data based on policies
   • BTo monitor and log all access attempts to sensitive data
   • CTo automatically block all external network connections
   • DTo encrypt data so that it cannot be read by unauthorized users
   Reveal Solution Discussion Select an answer first