Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 94
- A Network DLP
- B Endpoint DLP
- C Enterprise DLP
- D Stand-alone DLP
Reveal correct answer
Correct answer: B
Explanation
Correct Answer:
B is correct. Endpoint DLP (EDLP) is primarily concerned with both data at rest and data in use, typically on protected hosts, such as servers and workstations. Typically a software agent runs on the host and reports back to a central EDLP server.
Incorrect Answers:
A is incorrect. Network data loss prevention (NDLP) applies data protection policies and technologies to data in transit, over networks. Network DLP is usually implemented as appliances deployed at the perimeter of an organization’s network.
C is incorrect. Enterprise DLP is the overall name for data loss prevention solutions that span both the network and endpoints of an enterprise infrastructure.
D is incorrect. Stand-alone DLP is applied to individual hosts that are isolated from the network. Typically this involves controls preventing the use of removable media as well as control over applications.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
