Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 6 of 122
Free Preview · 122 of 404 · questions 1–122 of 404 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answer is: B. Implement MFA on all the servers with encrypted data 🔐 Why this is correct: Encrypting hard drives protects data at rest, but if an attacker or unauthorized user gains access to the server (e.g., via stolen credentials), they could still access decrypted data. Multi-Factor Authentication (MFA) adds a strong layer of access control — even if credentials are compromised, the attacker still needs a second factor (like a phone app or hardware token). This aligns well with a data loss prevention (DLP) strategy by preventing unauthorized access to encrypted data.
Chat GPT: While encrypting hard drives is an excellent data loss prevention (DLP) strategy, it is equally important to secure access to the servers where encrypted data is stored. Implementing Multi-Factor Authentication (MFA) ensures that even if an unauthorized user gains access to credentials, they will still need a second authentication factor (e.g., a mobile app code, hardware token, or biometric data) to access the server. This adds an essential layer of security to protect sensitive data.
A is the only real DLP option presented. B is access control which is part of DLP, but the big-3 of DLP are protecting Data at Rest (server), Data in Transit (network) and Data in Use (user-end). C and D are also more about access control and network segmentation than they are about preventing data loss.