350-201 Question 100
Select 1An organization is implementing a Data Loss Prevention (DLP) solution to safeguard sensitive customer information. During the assessment, the security team identifies three critical scenarios: unauthorized access to files stored on servers, sensitive data being emailed externally, and confidential data being processed within a web-based application. Which classification of data (based on its state) should the team prioritize for protection in each of these scenarios?
- A
Data at rest for files stored on servers, data in motion for emails sent externally, and data in use for data processed in web applications
- B
Data in use for files stored on servers, data in motion for emails sent externally, and data in rest for data processed in web applications
- C
Data in motion for files stored on servers, data in rest for emails sent externally, and data in use for data processed in web applications
- D
Data in use for files stored on servers, data at rest for emails sent externally, and data in motion for data processed in web applications
Show answer and explanation
Correct answer: A
Explanation
Understanding the states of data is critical for implementing an effective DLP solution. 'Data at rest' refers to information stored on physical or virtual storage, such as servers. 'Data in motion' describes data being transmitted across networks, like emails being sent externally. 'Data in use' involves data actively processed or accessed, such as confidential information processed within applications. Correctly identifying the state of the data helps in applying relevant controls and ensuring compliance with security standards.
- A. Correct.
Correct: Files stored on servers are considered 'data at rest,' emails being sent externally represent 'data in motion,' and data being processed in a web-based application is classified as 'data in use.'
- B. Incorrect.
Incorrect: Files stored on servers are not 'data in use,' and emails sent externally are not 'data in rest.' This classification does not align with standard definitions.
- C. Incorrect.
Incorrect: Files stored on servers are not 'data in motion,' and emails sent externally are not 'data in rest.' This misclassifies the states of data.
- D. Incorrect.
Incorrect: Files stored on servers are not 'data in use,' and emails sent externally are not 'data at rest.' This classification is inconsistent with the scenarios provided.