38. A company plans to secure its systems by preventing users from sending sensitive data over corporate email and restricting access to potentially harmful websites. Which of the following features should the company set up?
Answer: A,B
DLP software and DNS filtering should be set up to secure the systems.
Implementing DLP (Data Loss Prevention) software is essential for preventing users from sending sensitive data over corporate email, while DNS filtering is effective in restricting access to potentially harmful websites.
A) DLP software
DLP software is designed to monitor and control the transfer of sensitive information, ensuring that data is not sent outside the organization without proper authorization. This feature directly addresses the company's goal of preventing sensitive data leakage through corporate email by identifying and blocking such attempts.
B) DNS filtering
DNS filtering works by controlling the websites that users can access, which is vital for restricting access to potentially harmful sites. By implementing DNS filtering, the company can effectively block users from visiting malicious domains, thereby enhancing the overall security posture.
C) File integrity monitoring
While file integrity monitoring is useful for detecting unauthorized changes to files and ensuring data integrity, it does not directly address the issue of preventing data transmission via email or controlling internet access. Thus, it is not the right choice for the given scenario.
D) Stateful firewall
A stateful firewall primarily monitors network traffic and maintains the state of active connections but does not specifically prevent the sending of sensitive data over email or restrict access to harmful websites. Therefore, it is less relevant compared to DLP software and DNS filtering for the specified objectives.
E) Guardrails
Guardrails in a security context typically refer to measures that guide user behavior within acceptable parameters. However, they do not directly prevent data transmission or restrict website access, making them an inadequate option for the company's immediate needs.
F) Antivirus signatures
Antivirus signatures are crucial for identifying and mitigating malware threats but do not play a role in preventing the transmission of sensitive data through email or controlling access to websites. Thus, this option does not address the company's specific security requirements.
Conclusion
DLP software and DNS filtering are the most suitable solutions for the company's objectives of safeguarding sensitive data and restricting access to harmful websites. Other options, while important for overall security, do not directly fulfill the requirements outlined in the question, making A and B the definitive correct choices.