Microsoft Cybersecurity Architect (SC-100)Evaluate Governance Risk Compliance (GRC) technical strategies and security operations strategiesEasy
A global manufacturing company is implementing a new enterprise resource planning (ERP) system that will process sensitive financial and operational data across multiple geopolitical regions. The cybersecurity architect needs to ensure that data residency requirements are met for each region while maintaining a unified security posture. Which GRC technical strategy is BEST suited to address this challenge?
- ADeploying a global Security Information and Event Management (SIEM) system.
- BUtilizing data loss prevention (DLP) solutions with regional policy enforcement.
- CEstablishing a centralized identity and access management (IAM) system.
- DImplementing a distributed ledger technology for data integrity.
Show answer & explanationAnswer & explanation
Correct answer: B. Utilizing data loss prevention (DLP) solutions with regional policy enforcement.
Data Loss Prevention (DLP) solutions are designed to prevent sensitive data from leaving defined boundaries. With regional policy enforcement, DLP can ensure that data stays within its required geopolitical region, directly addressing data residency while supporting a unified security posture.
Why the other options are wrong
- A. A global SIEM aggregates logs for security monitoring but does not enforce data residency policies at the point of data storage or transfer.
- C. Centralized IAM manages user access, but it does not inherently enforce data residency or prevent data from being stored in unauthorized locations.
- D. Distributed ledger technology focuses on data integrity and immutability, not primarily on enforcing data residency requirements.
Data Loss Prevention (DLP)
DLP is a set of tools and processes designed to ensure that sensitive data is not lost, misused, or accessed by unauthorized users.
- Prevents unauthorized data exfiltration.
- Enforces data handling policies.
- Monitors data in use, in motion, and at rest.
Memory trick: Residency rules keep data home, DLP's the guard at the door.