Users at a company work with highly sensitive data. The security department implemented an administrative and technical control to enforce least-privilege access assigned to files. However, the…

The correct answer is C. Install a DLP solution. A DLP (Data Loss Prevention) solution is the best answer because least-privilege access controls only restrict who can access data - they do not prevent an authorized user from exfiltrating that data (e.g., emailing it out, uploading it to a cloud drive, or copying it to USB)…

Security and disaster recovery

Question

Users at a company work with highly sensitive data. The security department implemented an administrative and technical control to enforce least-privilege access assigned to files. However, the security department has discovered unauthorized data exfiltration. Which of the following is the BEST way to protect the data from leaking?

Exhibit

Options

AUtilize privacy screens.
BImplement disk quotas.
CInstall a DLP solution.
DEnforce the lock-screen feature.

How the community answered

(44 responses)

A
5% (2)
B
16% (7)
C
73% (32)
D
7% (3)

Explanation

A DLP (Data Loss Prevention) solution is the best answer because least-privilege access controls only restrict who can access data - they do not prevent an authorized user from exfiltrating that data (e.g., emailing it out, uploading it to a cloud drive, or copying it to USB). DLP monitors, detects, and blocks the unauthorized transfer or transmission of sensitive data regardless of user permissions. Privacy screens (A) only prevent shoulder surfing. Disk quotas (B) limit storage usage, not data movement. Enforcing a lock screen (D) addresses physical access when a workstation is unattended, not active exfiltration.

Topics

#Data Loss Prevention#Data Exfiltration#Security Controls#Sensitive Data Protection

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice