Exam SY0-601 topic 1 question 360 discussion

Sneaky COMPTIA

D. DLP

It's DLP

This one was in my exam Oct 28, 2023. I went with D. Passed with 790. About 50% questions were from this dump but I don't have the contributor access. 3 Simulations: Firewalls, Attacks and data classification. Other questions were not that difficult, just new to me; few were bizarre but that's compTIA for you. Good luck folks.

This is the last free question available. This marks the end of my study. Wish me luck on tomorrow's exam brothers!

Not how I'd define DLP, but it's the only option that actively monitors network. tcpreplay is used to clone tcp connection (replay attack), file integrity monitoring is not scanning networks, but files, honeynets are traps for malicious individuals.

DLP is used to identify sensitive data and FIM is used to detect changes to those sensitive data and warn the security teams for a more robust security plan

FIM ( file integrity monitoring ) it doesn't check file types , instead checks file signatures or fingerprints. So THe correct answer is D, DLP.

Answer is D. Data in motion: Ensuring the safe transmission of sensitive, confidential or proprietary data while it moves across the network through encryption and/or other e-mail and messaging security measures

Most likely D. DLP is used to identify sensitive data and FIM is used to detect changes to those sensitive data and warn the security teams for a more robust security plan

The answer is DLP. FIM is a "red herring" answer. The clue in the question comes from the word "file types." While, at the end of the day, FIM would check this as well, it is more specifically intended to check the inner composition of files rather than just their type. CompTIA isn't thinking as hard about this as some of the people on here, I don't think.

i'll go with A

DLP solutions are designed to detect and prevent the unauthorized transmission of sensitive or confidential data. They monitor network traffic in real-time and inspect the content of files to identify specific file types, such as PII (Personally Identifiable Information), credit card numbers, or classified information. When a matching file type is detected, DLP solutions can take various actions, such as blocking the transmission, alerting security personnel, or applying encryption measures.

A: FIM is better in my understandings. The question is asking for a active monitoring solution. FIM is powerful to monitor files in network transmission. DLP is a solution to block the protected type when being transmitted but can not monitor the files those are being transmitted on the network.

DLP solution is used monitor the traffic for any files the contain sensitive information

A. FIM

D. DLP