CompTIA Server+ SK0-005 Practice Question
During a security review, several developers admit that they sometimes upload customer database extracts to their personal cloud-storage accounts using a web browser. Compliance now requires that any outbound transfer of unencrypted files containing U.S. Social Security numbers be blocked before the data leaves the corporate network. The server administrator needs a data loss prevention control that:
- inspects outbound web traffic, including HTTPS
- uses pattern or exact data matching for SSNs
- can stop the upload in real time
- does not rely on installing an agent on every workstation
Which of the following solutions would BEST meet these requirements?
Deploy endpoint DLP agents that disable USB mass-storage devices on every workstation.
Configure the secure email gateway to strip or quarantine messages that contain Social Security numbers.
Run a storage DLP scanner that periodically searches SMB file shares for files containing Social Security numbers.
Implement a network-based DLP proxy on the internet egress firewall that performs SSL/TLS deep inspection and blocks policy-violating uploads.