350-201 Question 103
Select 2A company is experiencing frequent accidental data leaks due to employees sharing sensitive customer information in emails. The security team wants to implement a solution that can detect and prevent such incidents by analyzing email content and enforcing appropriate policies. Which mechanisms can be used to address this issue?
- A
Content-based inspection to analyze email body and attachments for sensitive data
- B
Endpoint containment to block all email traffic from user devices
- C
Regex pattern matching for identifying personally identifiable information (PII)
- D
Encryption of all outgoing emails to protect sensitive data
- E
Integration with a cloud access security broker (CASB) for monitoring email activities
Show answer and explanation
Correct answers: A, C
Explanation
Data loss prevention (DLP) mechanisms such as content-based inspection and regex pattern matching are effective in detecting and enforcing policies to prevent accidental data leaks through emails. Content-based inspection analyzes the body and attachments for sensitive information, while regex pattern matching detects specific patterns like PII. These techniques directly address the issue of accidental data leakage in emails.
- A. Correct.
Content-based inspection is a core mechanism used in data loss prevention (DLP) solutions to identify sensitive information, such as customer data, within email content and attachments. This helps in detecting and mitigating accidental data leakage.
- B. Incorrect.
Endpoint containment is not relevant in this scenario as it would block all email traffic, which is not a feasible or practical solution for regular business operations.
- C. Correct.
Regex pattern matching is a common technique in DLP solutions to identify specific patterns, such as credit card numbers, Social Security numbers, or other PII, in email content or attachments.
- D. Incorrect.
Encryption protects data in transit but does not address the detection or prevention of accidental data leaks caused by employees sharing sensitive information inappropriately.
- E. Incorrect.
While CASB can enhance cloud-based security, it is not specifically designed for the detection and prevention of sensitive data leakage through emails.