Cybersecurity and Response Planningintermediate
When is an automated data loss prevention action such as moving or encrypting a file safer to enable?
Answer
After the system has been tuned and false positives are less likely
Explanation
### Why this is right
Tuning reduces the chance that legitimate data will be treated as a violation and changed automatically.
### The concept
DLP can detect sensitive data and alert, encrypt, or move it. Automated remediation can disrupt work if rules generate false positives.
### The other options
- **B. Before any data types or handling rules are defined**: leaves the system without a sound basis for decisions.
- **C. Whenever an employee reports any unusual behavior**: does not establish that a DLP policy violation occurred.
- **D. Only after all network monitoring has stopped**: is unrelated to DLP rule accuracy.
### Remember
Tune detection before permitting automatic changes.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free