nerdexam
CompTIA

SY0-301 · Question #472

Which of the following is a Data Loss Prevention (DLP) strategy and is MOST useful for securing data in use?

The correct answer is D. Endpoint protection. Data Loss Prevention (DLP) strategies address three data states: data at rest, data in transit, and data in use. Endpoint protection is the DLP strategy most effective for securing data in use - data actively being processed, accessed, or manipulated on a device. Endpoint DLP…

Security operations

Question

Which of the following is a Data Loss Prevention (DLP) strategy and is MOST useful for securing data in use?

Options

  • AEmail scanning
  • BContent discovery
  • CDatabase fingerprinting
  • DEndpoint protection

How the community answered

(16 responses)
  • A
    6% (1)
  • D
    94% (15)

Explanation

Data Loss Prevention (DLP) strategies address three data states: data at rest, data in transit, and data in use. Endpoint protection is the DLP strategy most effective for securing data in use - data actively being processed, accessed, or manipulated on a device. Endpoint DLP agents monitor and control what users do with data (copy, print, screenshot, upload) in real time on the endpoint. Email scanning protects data in transit. Content discovery identifies and classifies data at rest. Database fingerprinting helps identify sensitive data patterns but is not specifically a 'data in use' control.

Topics

#DLP#data in use#endpoint protection#data loss prevention

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice