Examkin

Question

Difficulty: EasyData Protection and Storage Security Architecture

An organization needs to prevent customer service representatives from copying sensitive customer database files to unauthorized USB flash drives attached to local workstations. Which data protection control should the security analyst implement to enforce this restriction?

  1. Endpoint Data Loss Prevention (DLP)Answer
  2. B
    Storage Area Network (SAN) LUN masking
  3. C
    Asymmetric RSA key pairs for bulk file encryption
  4. D
    Deception honeypots deployed on the storage VLAN

Answer

Endpoint Data Loss Prevention (DLP) should be implemented to monitor and block unauthorized file transfers to removable USB storage.
Endpoint Data Loss Prevention (DLP) software runs directly on user workstations to inspect data in use and enforce policies that block unauthorized operations, such as copying sensitive files containing Personal Identifiable Information (PII) to removable USB media.

Step-by-Step Solution

1
Identify the risk and security objective
The objective is preventing exfiltration of sensitive data to unauthorized local USB drives.
Understanding the threat vector guides selecting the appropriate control boundary.
2
Evaluate the control mechanisms
Endpoint DLP agents inspect content on host devices and block policy violations such as write actions to removable media.
Host-based data protection mechanisms operate directly at the endpoint operating system level where USB peripherals are attached.

Key Concept

Endpoint Data Loss Prevention (DLP)
Rate this question

Topics

Data Protection and Storage Security Architecture

More questions from this topic