nerdexam
(ISC)2

CCSP · Question #53

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to get truly holistic coverage of your environment

The correct answer is A. Getting signed user agreements from all users. To ensure holistic coverage and user awareness for a Data Loss Prevention (DLP) solution, obtaining signed user agreements is a crucial deployment step.

Submitted by rachelw· Apr 18, 2026Legal, Risk and Compliance

Question

You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to get truly holistic coverage of your environment, you should be sure to include __________ as a step in the deployment process.

Options

  • AGetting signed user agreements from all users
  • BInstallation of the solution on all assets in the cloud data center
  • CAdoption of the tool in all routers between your users and the cloud provider
  • DAll of your customers to install the tool

How the community answered

(53 responses)
  • A
    77% (41)
  • B
    4% (2)
  • C
    13% (7)
  • D
    6% (3)

Why each option

To ensure holistic coverage and user awareness for a Data Loss Prevention (DLP) solution, obtaining signed user agreements is a crucial deployment step.

AGetting signed user agreements from all usersCorrect

Implementing a DLP solution often requires changes in user behavior and data handling practices, making signed user agreements essential for communicating policies, obtaining consent for monitoring, and setting expectations about how sensitive data should be managed and protected. This fosters a culture of compliance and reduces inadvertent data leaks.

BInstallation of the solution on all assets in the cloud data center

While DLP can be installed on assets, a cloud-based DLP solution often integrates at the network, endpoint, or application level, not necessarily requiring installation on all underlying cloud data center assets, which are typically managed by the cloud provider.

CAdoption of the tool in all routers between your users and the cloud provider

Installing a DLP tool in all routers between users and the cloud provider is impractical and often outside the scope or capability of a cloud DLP deployment, which typically focuses on data in transit, at rest, or in use within the cloud environment.

DAll of your customers to install the tool

Expecting all customers to install your DLP tool is unrealistic and beyond the scope of a firm's internal DLP deployment; DLP typically protects an organization's own data, not data residing on customer systems.

Concept tested: DLP deployment considerations and user agreements

Topics

#DLP deployment#User agreements#Legal compliance#Privacy

Community Discussion

No community discussion yet for this question.

Full CCSP Practice