CND Application And Data Protection Practice Question
A cybersecurity architect is designing an enterprise Data Loss Prevention (DLP) deployment strategy across endpoint, network, and storage vectors. Which THREE technical capabilities are standard functions of enterprise storage discovery DLP tools?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Executing automated remediation tasks such as quarantining, encrypting, or deleting discovered sensitive files
Storage discovery DLP tools scan repositories like file shares, databases, and cloud storage for sensitive unencrypted data at rest.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Executing automated remediation tasks such as quarantining, encrypting, or deleting discovered sensitive files
Why this is correct
Discovery DLP tools can automatically apply remediation policies to secure or remove misplaced sensitive files.
- ✓
Scanning file shares and NAS devices for unencrypted sensitive files (e.g., PII, financial records)
Why this is correct
Storage discovery bots crawl file repositories to locate hidden unencrypted sensitive data.
- ✗
Inspecting live bidirectional SIP VoIP voice call streams for rogue credit card dictation
Why it's wrong here
Storage discovery does not inspect real-time VoIP voice calls.
- ✓
Querying relational databases (e.g., Oracle, SQL Server) for columns containing unprotected credit card numbers
Why this is correct
Storage discovery tools connect to databases to identify unencrypted sensitive data at rest.
- ✗
Intercepting local USB thumb drive file copy operations inline on endpoints
Why it's wrong here
USB copy interception is performed by endpoint DLP client drivers, not storage discovery scanners.
About these practice questions
One of 323 original CND practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CND practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CND exam.