Which of the following is a Data Loss Prevention (DLP) strategy and is MOST useful for securing
data in use?
A.
Email scanning
B.
Content discovery
C.
Database fingerprinting
D.
Endpoint protection
Explanation:
Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and
networks) to make sure that key content is not deleted or removed. They also monitor who is using
the data (looking for unauthorized access) and transmitting the data. DLP systems share
commonality with network intrusion prevention systems. Endpoint protection provides security and
management over both physical and virtual environments.
A confusing question to my mind.
We are speaking of data in “USE”. I would infer that the data is being consumed somehow, and that it is data in “transit” as data at rest is by definition latent and static (dormant)
So to my mind, the only DLP being used for data in transit in here is
A- Email scanning.
I am not quite sure what they mean by D- Endpoint Protection.
An Endpoint Protector is a full DLP and MDM solution that prevents users from storing sensitive data on their workstations and from taking critical data outside the company or bringing potential harmful files on storage devices inside the network
0
1