nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #326

Which of the following tools would be the BEST to prevent unauthorized data exfiltration from a corporate network? ()

The correct answer is C. Data Loss Prevention (DLP). Data Loss Prevention (DLP) solutions are specifically designed to detect, monitor, and block the unauthorized transfer or leakage of sensitive data - making them the best tool for preventing data exfiltration. An Application Firewall filters web traffic but does not inspect…

Security Operations

Question

Which of the following tools would be the BEST to prevent unauthorized data exfiltration from a corporate network? ()

Options

  • AApplication Firewall
  • BFull Disk Encryption (FDE)
  • CData Loss Prevention (DLP)
  • DNetwork Intrusion Detection System (NIDS)

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    91% (48)
  • D
    4% (2)

Explanation

Data Loss Prevention (DLP) solutions are specifically designed to detect, monitor, and block the unauthorized transfer or leakage of sensitive data - making them the best tool for preventing data exfiltration. An Application Firewall filters web traffic but does not inspect data content for sensitive information. Full Disk Encryption (FDE) protects data if a device is physically stolen but does not prevent authorized users from exfiltrating data over the network. A NIDS detects suspicious network activity but is passive and does not actively block data transfers.

Topics

#Data Loss Prevention (DLP)#Data Exfiltration#Security Tools#Data Security

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice