CompTIA CS0-003 Exam - Topic 4 Question 1 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 1
Topic #: 4

Members of the sales team are using email to send sensitive client lists with contact information to their personal accounts The company's AUP and code of conduct prohibits this practice. Which of the following configuration changes would improve security and help prevent this from occurring?

AConfigure the DLP transport rules to provide deep content analysis.

BPut employees' personal email accounts on the mail server on a blocklist.

CSet up IPS to scan for outbound emails containing names and contact information.

DUse Group Policy to prevent users from copying and pasting information into emails.

EMove outbound emails containing names and contact information to a sandbox for further examination.

Show Suggested Answer

Suggested Answer: A

Data loss prevention (DLP) is a set of policies and tools that aim to prevent unauthorized disclosure of sensitive data. DLP transport rules are rules that apply to email messages that are sent or received by an organization's mail server. These rules can provide deep content analysis, which means they can scan the content of email messages and attachments for sensitive data patterns, such as client lists or contact information. If a rule detects a violation of the DLP policy, it can take actions such as blocking, quarantining, or notifying the sender or recipient. This would improve security and help prevent sales team members from sending sensitive client lists to their personal accounts. Reference: CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives (CS0-002), page 14; https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/data-loss-prevention

by Lilli at Jul 24, 2023, 12:07 PM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glendora

3 months ago

Moving emails to a sandbox? That’s a bit overkill, right?

upvoted 0 times

...

Pamella

3 months ago

IPS scanning for outbound emails is a solid idea!

upvoted 0 times

...

Ronnie

4 months ago

Wait, can you really stop people from copying and pasting?

upvoted 0 times

...

Ira

4 months ago

Blocking personal emails sounds too extreme.

upvoted 0 times

...

Louisa

4 months ago

DLP transport rules are a must for sensitive data!

upvoted 0 times

...

Jordan

4 months ago

I’m a bit confused about option D; can Group Policy really prevent copying and pasting? That seems a bit extreme.

upvoted 0 times

...

Quentin

4 months ago

I practiced a similar question about outbound email security, and I feel like option C with IPS scanning could be effective.

upvoted 0 times

...

Tori

5 months ago

I'm not entirely sure, but blocking personal email accounts like in option B seems like it could help too, right?

upvoted 0 times

...

Catrice

5 months ago

I remember discussing DLP rules in class, and I think option A makes sense for analyzing content deeply.

upvoted 0 times

...

Glenn

5 months ago

Hmm, this is an interesting one. I'm not entirely sure which option is the best here. I think I'll go with marking the variable as sensitive, but I'll double-check the other choices just to be sure I'm making the right call.

upvoted 0 times

...

Tammy

5 months ago

I think I can figure this out. The diagram shows the network topology, and the question is asking about the role of router R3. I'll need to carefully analyze the information provided to determine which statement is true.

upvoted 0 times

...

Narcisa

5 months ago

This is a tricky one. I'll need to carefully read through the options and think about how the serial number requirements for each plant would be met.

upvoted 0 times

...