Chapter 15 - 04 - Discuss Data Loss Prevention Concepts - 02_ocred.pdf

Certified Cybersecurity Technician Data Security Exam 212-82 DLP Solution: Windows Information Protection (WIP) O Windows Information Protection (WIP) has an endpoint data loss prevention (DLP) capability that can be helpful in protecting local data at rest on endpoint devices O WIP can be configure...

Certified Cybersecurity Technician Data Security Exam 212-82 DLP Solution: Windows Information Protection (WIP) O Windows Information Protection (WIP) has an endpoint data loss prevention (DLP) capability that can be helpful in protecting local data at rest on endpoint devices O WIP can be configured to store business data only on approved devices / within approved applications Endpoint data loss prevention New sensitivity label 7 Q! R Currently, you can only set up endpoint DLP capabiliies offered by Windows Information Protection (WiF). DLP settings for Office 363 apps will be avalable 500N Learn how endpoimt DLP woeks wih sensitrity labels Endpoint data loss prevention © @ o Name & description @ tenaryption = — plevequitites B Content marking @ - When Hes that have this Isbel applied are stored on Windows devices, endpaint DUP wil help protect against data leaks There aro prerequestes for fully implementing endpont data loss preventian for Isbelled content. Learn about these Apply endpoint DLP to fles with this label appled. | Copyright © by [. All Rights Reserved. Reproduction is Strictly Prohibited. DLP Solution: Windows Information Protection (WIP) Windows Information Protection (WIP) has an endpoint DLP capability that can be helpful for protecting local data at rest on endpoint devices. WIP can be configured to store business data only on approved devices/within approved applications. If the user creates a file on a Windows 10 device, the Windows Defender ATP evaluates its content for sensitive or customized information. In case of file matches, Windows Defender ATP applies DLP at its endpoints. For data discovery, Windows Defender ATP integrates with Azure Information Protection (AIP) and reports the detected sensitive data. Files with sensitive information and sensitivity labels are aggregated by AIP. Advantages of WIP: = As WIP = |t reinforces the data protection for existing line-of-business applications. = WIP can remove the corporate data from Intune MDM enrolled devices. = separates corporate and personal switch the applications or environments. data, there is no need for an employee to For configuration, deployment, and management, WIP integrates with Microsoft Intune, System Center Configuration Manager, or the current mobile device management. Module 15 Page 1916 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited. Exam 212-82 Certified Cybersecurity Technician Data Security New sensitivity label Endpoint data loss prevention Currently, you can only set up endpoint DLP capabilities offered by Windows Information Protection (WIP). DLP settings for Office 365 apps will be available soon. Learn how endpoint DLP works with sensitivity labels Endpoint @ Name & description. Encryption @ content marking @ on When files that have this label applied are stored on Windows devices, endpoint DLP will help protect against data leaks There are prerequi for fully impl, dpoint data loss prevention for labelled content. Learn about these J L pretequisites = Auto labeling data lossp Apply endpoint DLP to files with this label applied | I [ Review your settings Figure 15.102: Screenshot of WIP Module 15 Page 1917 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Data Security DLP MvDLP £ Fomeon - C o (x et Y Solutions MyDLP allows the user to monitor, inspect, and prevent all outgoing confidential data without any hassle VEgrttcntan o it o 1000104 D LP Tnterprive Edition Dasnbosr Paly © Install Policy #X e Oofects fenngs < Add Rule Q Chanewt Oucoon Ase $700 = [ Sources | v i Logs | Endpomes : [g Symantec Data Loss Prevention https://www.symantec.com Raviviony Ioieman Oestinations \ | | Iformaton Types o, 38 — o Action | P | @ {é} SecureTrust Data Loss Prevention https://www.securetrust.com McAfee Total Protection https://www.mcafee.com Check Point Data Loss Prevention https://www.checkpoint.com T + Add Rule a0 To T T Ty htps//mydip.com @ Copyright © by Digital Guardian Endpoint DLP hitps://digitalguardian.com All Rights Reserved. ReproductionIs Strictly Prohibited. DLP Solutions = MyDLP Source: https://mydip.com MyDLP is a free and open-source solution that allows organizations to secure confidential data. The supported data inspection channels include web, email, instant messaging, printers, removable storage devices, screenshots, etc. MyDLP allows the user to monitor, inspect, and prevent all outgoing confidential data without any hassle. With its painless deployment and configuration, an easy-to-use policy interface, and great performance, IT administrators and security officers are able to effectively combat data leakage. Module 15 Page 1918 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Data Security F o wova Exam 212-82 s N C (% puet//1000.104 - - -~o #X £ Install Policy D L P Enterprise Edition M Y v ‘ = Logoedin as mydip