An administrator has created a DLP rule to search for text within documents that match a specific pattern. After creating a Real-time Protection Policy to make use of this DLP rule, the…

The correct answer is B. Forensic. When an administrator suspects that a DLP rule is generating false positives, the Forensic feature within the Netskope tenant allows for reviewing the data that was matched by the DLP rule. This feature provides detailed logs and insights into why a specific piece of data was…

Advanced Data Loss Prevention (DLP) and Compliance

Question

An administrator has created a DLP rule to search for text within documents that match a specific pattern. After creating a Real-time Protection Policy to make use of this DLP rule, the administrator suspects the rule is generating false positives. Within the Netskope tenant, which feature allows administrators to review the data that was matched by the DLP rule?

Options

ARisk Insights
BForensic
CQuarantine
DLeaal Hold

How the community answered

(38 responses)

A
16% (6)
B
74% (28)
C
5% (2)
D
5% (2)

Explanation

When an administrator suspects that a DLP rule is generating false positives, the Forensic feature within the Netskope tenant allows for reviewing the data that was matched by the DLP rule. This feature provides detailed logs and insights into why a specific piece of data was flagged, enabling the administrator to analyze and adjust the rule as needed. To access and use the Forensic feature: Navigate to the Forensic section in the Netskope UI. Review the detailed logs and matched data to understand the context and reason behind each Adjust the DLP rules if necessary to reduce false positives and improve accuracy.

Topics

#DLP rules#false positives#forensics#real-time protection policy

Community Discussion

No community discussion yet for this question.

Full NSK101 Practice