Which components can perform a file system scan of a workstation?

Which components can perform a file system scan of a workstation?

• A. DLP Agent/Discover Server
• B. Enforce Server
• C. Cloud Detection Server
• D. SSL certificate store

Answer: (A)

Scanning a workstation’s local files is handled by the endpoint-facing components of DLP. The DLP Agent is installed on the workstation and is responsible for inspecting files on that machine, looking for sensitive data as part of a file-system scan. The Discover Server complements this by coordinating discovery tasks across many endpoints, pushing scan jobs and collecting results, but it relies on the agent on each workstation to actually perform the file-system analysis. The Enforce Server handles policy enforcement and real-time responses to detections, not the act of scanning the endpoint. The Cloud Detection Server focuses on data in cloud sources, not the local workstation. The SSL certificate store is for certificate management and secure communications, not data scanning. So the component capable of performing a file-system scan on a workstation is the combination of the DLP Agent and the Discover Server, with the agent doing the actual file inspection and the Discover Server orchestrating the discovery across endpoints.

Scanning a workstation’s local files is handled by the endpoint-facing components of DLP. The DLP Agent is installed on the workstation and is responsible for inspecting files on that machine, looking for sensitive data as part of a file-system scan. The Discover Server complements this by coordinating discovery tasks across many endpoints, pushing scan jobs and collecting results, but it relies on the agent on each workstation to actually perform the file-system analysis.

The Enforce Server handles policy enforcement and real-time responses to detections, not the act of scanning the endpoint. The Cloud Detection Server focuses on data in cloud sources, not the local workstation. The SSL certificate store is for certificate management and secure communications, not data scanning.

So the component capable of performing a file-system scan on a workstation is the combination of the DLP Agent and the Discover Server, with the agent doing the actual file inspection and the Discover Server orchestrating the discovery across endpoints.