712-50 practice question 19 of 35

Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and…

Full set: 493 questions

Scenario: Your corporate systems have been under constant probing and attack from foreign IP addresses for more than a week. Your security team and security infrastructure have performed well under the stress. You are confident that your defenses have held up under the test, but rumors are spreading that sensitive customer data has been stolen and is now being sold on the Internet by criminal elements. During your investigation of the rumored compromise you discover that data has been breached and you have discovered the repository of stolen data on a server located in a foreign country. Your team now has full access to the data on the foreign server. Your defenses did not hold up to the test as originally thought. As you investigate how the data was compromised through log analysis you discover that a hardworking, but misguided business intelligence analyst posted the data to an obfuscated URL on a popular cloud storage service so they could work on it from home during their off-time. Which technology or solution could you deploy to prevent employees from removing corporate data from your network? Choose the best answer.

Answer options
A:

A. Security Guards posted outside the Data Center

B:

B. Data Loss Prevention (DLP)

C:

C. Rigorous syslog reviews

D:

D. Intrusion Detection Systems (IDS)

Correct Answer:
<P>ANSWER: B</P>
Explanation

 Best Technology for Preventing Data Exfiltration DLP solutions monitor, detect, and prevent unauthorized data transfers, ensuring sensitive information does not leave the network. DLP would have detected and blocked the analyst’s attempt to upload data to a cloud service.  Why Not Other Options? A . Security guards: Ineffective for digital data exfiltration. C . Rigorous syslog reviews: Reactive, not preventive. D . Intrusion Detection Systems (IDS): IDS focuses on detecting external threats, not internal data transfers.  EC-Council Reference Highlights DLP as a critical tool for protecting sensitive data from unauthorized access and movement.

Scroll to Top