Certified Cloud Security Professional (CCSP)Cloud Data SecurityEasy
A multinational corporation uses a cloud-based document management system. They need to ensure that highly confidential documents remain protected even if they are downloaded or shared with unauthorized individuals, allowing granular control over viewing, editing, and printing regardless of where the document resides. Which technology is designed to provide this persistent protection?
- AData Masking
- BData Loss Prevention (DLP)
- CDigital Rights Management (DRM)
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: C. Digital Rights Management (DRM)
Digital Rights Management (DRM) is specifically designed to enforce usage policies and persistent protection on digital content, controlling actions like viewing, editing, printing, and sharing, even after the content has left the organization's direct control.
Why the other options are wrong
- A. Data masking changes sensitive data for non-production use and doesn't provide persistent usage control for confidential documents.
- B. DLP prevents data from leaving a defined boundary but doesn't control its usage once it has left.
- D. CASB enforces policies between users and cloud services, but doesn't typically embed persistent usage control within the document itself.
Digital Rights Management (DRM)
A set of technologies used to control access to and usage of copyrighted material and proprietary content, often by embedding usage rules directly into the digital assets themselves.
- Enforces usage policies on digital content.
- Provides persistent protection regardless of location.
- Controls actions like viewing, editing, printing, copying, sharing.
- Requires client-side enforcement mechanisms.
Memory trick: DRM locks the document, even after it leaves your hands.