350-201 Question 98
Select 3An organization is implementing a data loss prevention (DLP) solution to protect sensitive customer information. The security team needs to ensure that data is safeguarded at all stages: when stored on servers, during transmission across the network, and when actively being processed by applications. Which of the following correctly identifies the types of data states and associated risks that the organization must address to implement a comprehensive DLP strategy?
- A
Data at rest: Ensuring encryption of sensitive data stored on disk or in databases to prevent unauthorized access.
- B
Data in motion: Securing data transmitted across the network using protocols like TLS to prevent interception.
- C
Data in use: Encrypting data while it is being processed in memory to protect against unauthorized access.
- D
Data leakage: Monitoring email attachments and cloud uploads to prevent accidental or intentional exfiltration.
- E
Data loss: Using endpoint backups to recover sensitive data in case of accidental deletion.
Show answer and explanation
Correct answers: A, B, C
Explanation
A comprehensive Data Loss Prevention (DLP) strategy considers the protection of data in all three states: at rest, in motion, and in use. Data at rest involves encryption to secure stored data. Data in motion requires encryption protocols to secure transmitted data. Data in use involves protecting actively processed data. Understanding these concepts is critical to implementing effective security measures for data at all stages.
- A. Correct.
Correct. Data at rest refers to data stored on devices like disks, databases, or cloud storage, and protecting it typically involves encryption to prevent unauthorized access.
- B. Correct.
Correct. Data in motion refers to data being transmitted across networks, and securing it involves encryption protocols like TLS to prevent interception or tampering.
- C. Correct.
Correct. Data in use refers to data being actively processed in memory, and securing it often involves advanced techniques to protect against unauthorized access or exposure.
- D. Incorrect.
Incorrect. Data leakage refers to the accidental or intentional release of sensitive information, but it is not a specific data state (rest, motion, or use).
- E. Incorrect.
Incorrect. While data loss refers to the unavailability of data due to deletion or corruption, it is not a specific data state addressed in DLP strategies.