nerdexam
(ISC)2

CCSP · Question #163

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. Which of these activities should you perform before…

The correct answer is A. Survey your company's departments about the data under their control. Before deploying a Data Loss Prevention (DLP) solution, it's crucial to understand what sensitive data exists and where it resides within the organization.

Submitted by rania.sa· Apr 18, 2026Cloud Data Security

Question

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. Which of these activities should you perform before deploying the tool?

Options

  • ASurvey your company's departments about the data under their control
  • BReconstruct your firewalls
  • CHarden all your routers
  • DAdjust the hypervisors

How the community answered

(57 responses)
  • A
    81% (46)
  • B
    4% (2)
  • C
    5% (3)
  • D
    11% (6)

Why each option

Before deploying a Data Loss Prevention (DLP) solution, it's crucial to understand what sensitive data exists and where it resides within the organization.

ASurvey your company's departments about the data under their controlCorrect

Before deploying a Data Loss Prevention (DLP) solution, it is essential to conduct a comprehensive data discovery and classification exercise to identify where sensitive data is stored, processed, and transmitted across various departments. Surveying departments helps map out the types and locations of data they control, which is fundamental for configuring DLP policies effectively to protect that specific data.

BReconstruct your firewalls

Reconstructing firewalls is a network infrastructure change that is not directly related to the initial planning and policy definition required for a DLP solution.

CHarden all your routers

Hardening routers is a general security best practice but is not a prerequisite specifically for the effective deployment and configuration of a DLP solution.

DAdjust the hypervisors

Adjusting hypervisors relates to the underlying virtualization infrastructure, which is a technical task not directly tied to the initial data identification and policy planning phase of a DLP deployment.

Concept tested: DLP implementation prerequisites

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide#data-classification-in-microsoft-365-dlp

Topics

#DLP (Data Loss Prevention)#Data Classification#Data Discovery#Cloud Data Security Controls

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCSP Practice