Exam CS0-002 topic 1 question 86 discussion

Why do so many of these questions have such conflicting answers? I am more confused now than ever before since I started studying for CYSA 5 months ago. Maybe I shouldn't even bother.

B. Enforce geofencing to limit data accessibility. Reasoning: Geofencing allows the organization to define geographical boundaries where data can be accessed, adding an extra layer of control. It complements existing security measures by restricting access based on the physical location of the user or device. This measure is particularly effective for remote employees or devices accessing sensitive data.

It's crazy to me that people are saying NDA and AUP when those are DETERRENTS, they do not actually prevent anything. Geofencing is the correct answer.

D. Update the AUP (Acceptable Use Policy) to restrict data sharing. Modifying the AUP to clearly define and restrict data sharing practices, coupled with ongoing user training and awareness programs, helps in establishing organizational norms and expectations regarding data privacy. It can regulate how data should be handled, shared, and processed by the employees, providing a policy framework that supports the technical measures (like DLP and encryption) in place.

ChatGPT: go for Acceptable Use Pllicy AUP covers more than geofencing.

perimeter security or geo fencing is the only possible next step.

D. Update the AUP to restrict data sharing.

the BEST option to ensure the privacy of data on an organization's systems that already have full disk encryption and DLP in use is to update the Acceptable Use Policy (AUP) to restrict data sharing.

DLP and Encryption are sound technical controls that ensure data protection (which would include the Privacy). As mentioned below they are looking for a Managerial control, which would point to "Company Policy" - AUP: This would cover the organisation with sharing of information due to the consequences that will be imposed (even legal). Answer should be D in my opinion

B. Enforce geofencing to limit data accessibility would be the BEST option to ensure the privacy of the data that is on the organization's systems. Geofencing technology can help restrict access to sensitive data from outside certain geographic locations, which can help prevent unauthorized access to the data. This is a strong control that can help prevent both accidental and intentional unauthorized access to sensitive data, and it is often used in combination with other security measures like full disk encryption and DLP. While NDAs, password policies, and AUPs can help protect data privacy in certain circumstances, they are not as effective at preventing unauthorized access as geofencing.

B. geofencing can restrict access to data based on the geographic location of the user or device, helping to prevent unauthorized access or data leakage. It is the best option to complement the existing security measures and ensure data privacy.

This question is making it pretty clear that they are after managerial controls, since technicals are in place and seems to be working fine. A is clearly the correct answer.

Privacy of data is a concern of who is accessing it. NDA's are more of a legal protection against the data itself being exposed by people who already have access. Geofencing would further help limit who can access it.

I would go with D, because of the keyword "privacy" in the question. If it asked how to ensure the SECURITY, then I would pick B

A and C not necessarily. i am confusing B and D, but D is most correct i think.

I think it's D. Exam guide book, privacy is about the control the user has over who their data is shared with. A is weird because only references remote workers. B could help, but you already have DLP, and doesn't relate as much to privacy as D, I feel.

B is the only one that will actually ensure that people can't do it. Signing an NDA for example is simply them saying they won't disclose information, it doesn't actually seal their lips