Chapter 1
Security Architecture
Course: Comptia Securityx Cas 005
Subject: Comptia Securityx Cas 005 Practice Exam
Chapter: Security Architecture
Data security is a critical component of securing enterprise architecture, focusing on protecting data throughout its lifecycle, preventing unauthorized access, and ensuring data integrity and availability. This comprehensive approach involves various data loss prevention (DLP) measures, data classification, obfuscation, encryption, and data lifecycle management strategies.
1. Data Loss Prevention (DLP)
DLP solutions monitor and control the flow of data to prevent unauthorized access, sharing, or loss of sensitive data. Key DLP techniques include:
a. Blocking Use of External Media
- Description: Restricts the use of USB drives, external hard drives, and other removable media to prevent data theft and loss.
- Security Objective: Prevents unauthorized copying of sensitive data to untrusted devices.
- Real-Life Example: An organization disables USB ports on employee computers to prevent data transfer to unapproved devices.