CAS-003 · Question #789
A security engineer at a company is designing a system to mitigate recent setbacks caused competitors that are beating the company to market with the new products. Several of the products…
The correct answer is A. DLP. The scenario describes a likely insider threat or data exfiltration problem - competitors are releasing products incorporating the company's proprietary enhancements, suggesting sensitive intellectual property is leaking out. Data Loss Prevention (DLP) is specifically designed…
Question
A security engineer at a company is designing a system to mitigate recent setbacks caused competitors that are beating the company to market with the new products. Several of the products incorporate propriety enhancements developed by the engineer's company. The network already includes a SEIM and a NIPS and requires 2FA for all user access. Which of the following system should the engineer consider NEXT to mitigate the associated risks?
Options
- ADLP
- BMail gateway
- CData flow enforcement
- DUTM
How the community answered
(32 responses)- A78% (25)
- B6% (2)
- C13% (4)
- D3% (1)
Explanation
The scenario describes a likely insider threat or data exfiltration problem - competitors are releasing products incorporating the company's proprietary enhancements, suggesting sensitive intellectual property is leaking out. Data Loss Prevention (DLP) is specifically designed to detect and prevent unauthorized transmission of sensitive data, whether via email, USB, cloud uploads, or other channels. The existing controls (SIEM, NIPS, 2FA) address general security monitoring and access control, but none of them specifically prevent data from leaving the organization. DLP fills this gap by monitoring and blocking the egress of proprietary or classified information. A mail gateway addresses email-borne threats but not all exfiltration vectors. UTM combines multiple security functions but is not targeted at insider data leakage.
Topics
Community Discussion
No community discussion yet for this question.