NETSEC-PRO · Question #61
During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?
The correct answer is B. Enterprise DLP Profile. Enterprise DLP Profile is specifically designed to detect and log data exfiltration attempts, including those involving confidential or sensitive data. Enterprise DLP logs capture incidents involving potential data exfiltration. They help identify sensitive data transfers, even…
Question
During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?
Options
- AFile Blocking Profile
- BEnterprise DLP Profile
- CVulnerability Protection Profile
- DWildFire Analysis Profile
How the community answered
(49 responses)- A14% (7)
- B76% (37)
- C6% (3)
- D4% (2)
Explanation
Enterprise DLP Profile is specifically designed to detect and log data exfiltration attempts, including those involving confidential or sensitive data. Enterprise DLP logs capture incidents involving potential data exfiltration. They help identify sensitive data transfers, even in seemingly legitimate traffic. File Blocking and Vulnerability Protection handle files or exploit detection, while WildFire focuses on malware analysis--not direct data exfiltration.
Topics
Community Discussion
No community discussion yet for this question.