Module 03. Data Loss Prevention

Question 1

Bell-LaPudula

Answer 1

Confidential, Secret, Top Secret

Question 2

Data Classification

Answer 2

Public, Private, Restricted

Question 3

Data Types

Answer 3

Personal, Financial, Intellectual, Customer

Question 4

Personal ID Information

Answer 4

Health, Racial, Political, Religious

Question 5

Internet Data

Answer 5

Cookies, Hashed Email Address, Mobile Add

Question 6

Data Leak Channels

Answer 6

Physical:
Network:
Malware:
Protocol Abuse:

Question 7

Physical Data Leak

Answer 7

Employees, USB Ports(epoxy), Webcams, printers, scanners

Question 8

Network

Answer 8

SSL(Secure Socket Layer), TLS (Transport Layer Security) 443 : turned off, not strict enough

Question 9

Malware

Answer 9

Multi-Stage, Social Media, New signatures

Question 10

Protocol Abuse

Answer 10

DNS Tunneling, File Server Traffic (SFTP Allowed in outbound traffic), ICMP Tunneling - Sending data using echo packets.

Question 11

REGEX

Answer 11

Regular Expression

Question 12

DLP

Answer 12

Data Loss Prevention

Question 13

Block List

Answer 13

Threat Centric - all allowed except excluded list

Question 14

Allow List

Answer 14

Trust Centric - all denied except allowed list

Question 15

Open Source DLP

Answer 15

OpenDLP

Question 16

Encoding

Answer 16

replacing character

Question 17

Ciphering

Answer 17

using math code to encode character

Question 18

Steganography

Answer 18

Hiding file within a file.