exam questions

Exam CSSLP All Questions

View all questions & answers for the CSSLP exam

Exam CSSLP topic 1 question 89 discussion

Actual exam question from ISC's CSSLP
Question #: 89
Topic #: 1
[All CSSLP Questions]

Which of the following actions does the Data Loss Prevention (DLP) technology take when an agent detects a policy violation for data of all states? Each correct answer represents a complete solution. Choose all that apply.

  • A. It creates an alert.
  • B. It quarantines the file to a secure location.
  • C. It reconstructs the session.
  • D. It blocks the transmission of content.
Show Suggested Answer Hide Answer
Suggested Answer: Answer: C is incorrect. Data Loss Prevention (DLP) reconstructs the session when data is in motion. 🗳️
When an agent detects a policy violation for data of all states, the Data Loss prevention (DLP) technology takes one of the following actions: It creates an alert. It notifies an administrator of a violation. It quarantines the file to a secure location. It encrypts the file. It blocks the transmission of content.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
74gjd_37
5 months, 2 weeks ago
Selected Answer: D
D. While creating an alert is useful to notify concerned parties about potential violations and help in investigating incidents, it does not solve the issue at hand - which is to prevent any further potential violations from occurring. Similarly, quarantining files or reconstructing sessions may not be necessary or effective solutions for every instance of policy violation. Blocking transmission can minimize risks associated with confidential data leaks and unauthorized disclosures when policies governing those types of data are violated.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago