Difficulty: Easy

Average Score: 100%

Which of the following is the best technical method to protect sensitive data at an organizational level?

Rationale

Implement a DLP for all egress and ingress of sensitive information on the network.

Implementing a Data Loss Prevention (DLP) system is a comprehensive technical solution designed to monitor, detect, and prevent unauthorized data transfers within an organization's network. By establishing controls at both entry and exit points, sensitive information is safeguarded against accidental leaks or malicious breaches.

A (Deny all traffic on port 8080 with sensitive information on the VLAN.) YOUR ANSWER

Denying all traffic on a specific port may hinder legitimate communication and functionality within the network, potentially causing operational disruptions. This approach lacks the targeted and nuanced protection provided by a DLP system, which can selectively monitor and manage sensitive data flows regardless of the port used.

B (Develop a Python script to review email traffic for PII.) YOUR ANSWER

While developing a Python script for reviewing email traffic can aid in identifying Personally Identifiable Information (PII), it may not offer the same level of automated, real-time protection and enforcement capabilities as a dedicated DLP solution. Manual scripts are limited in scale and may not effectively cover all avenues of data transmission.

C (Employ a restrictive policy for the use and distribution of sensitive information.) YOUR ANSWER

While having a strict policy for handling sensitive data is crucial, relying solely on policy enforcement without technical safeguards like a DLP system leaves gaps in data protection. Policies guide behavior, but technical controls such as encryption, monitoring, and prevention mechanisms are essential to actively secure data.

D (Implement a DLP for all egress and ingress of sensitive information on the network.) CORRECT

Implementing a DLP system provides a proactive and dynamic defense mechanism against data breaches by monitoring and controlling the movement of sensitive information both entering and leaving the network. This approach offers granular control, real-time detection, and automated responses to safeguard critical data assets effectively.

Conclusion

By implementing a Data Loss Prevention (DLP) system for overseeing all data movements within the organizational network, sensitive information can be effectively protected against unauthorized access, exfiltration, or accidental disclosure. This technical solution offers a robust defense strategy that complements organizational policies and procedures, ensuring comprehensive data security measures are in place.

Related Questions

View all