exam questions

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 216 discussion

Actual exam question from ISC's CCSP
Question #: 216
Topic #: 1
[All CCSP Questions]

A DLP solution/implementation has three main components.
Which of the following is NOT one of the three main components?

  • A. Monitoring
  • B. Enforcement
  • C. Auditing
  • D. Discovery and classification
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Auditing, which can be supported to varying degrees by DLP solutions, is not a core component of them. Data loss prevention (DLP) solutions have core components of discovery and classification, enforcement, and monitoring. Discovery and classification are concerned with determining which data should be applied to the DLP policies, and then determining its classification level. Monitoring is concerned with the actual watching of data and how it's used through its various stages. Enforcement is the actual application of policies determined from the discovery stage and then triggered during the monitoring stage.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
[Removed]
9 months ago
Correct as per page 58 CBK 3rd edition.
upvoted 3 times
...
AWSPro24
9 months, 1 week ago
Selected Answer: C
This is a pretty lame question. Most modern DLP does support some auditing so you can see how you are doing against compliance targets. Obviously it can't track false negatives. But it can track positives so you can see if your training is paying off, for example. And here's a quote supporting this "DLP also provides reporting to meet compliance and auditing requirements and identify areas of weakness and anomalies for forensics and incident response." https://digitalguardian.com/blog/what-data-loss-prevention-dlp-definition-data-loss-prevention I'm picking C as well, but I don't like it and would like to see a much more wrong answer.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago