An organization is implementing a new data loss prevention (DLP) tool. Which of the following will BEST enable the organization to reduce false positive alerts?
B. Deploying the tool in monitor mode.
By deploying the DLP tool in monitor mode, the organization can observe and fine-tune its performance without actively blocking actions. This allows for the adjustment of rule sets and detection points based on real-world data and behavior, reducing false positives before the tool is fully enforced.
Using default rules or reducing detection points could miss actual incidents, and configuring a limited set of rules may not cover all relevant risks.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
thusharaj
1 month, 1 week ago