Module 2 Overview

Module 2 of 3

Data Protection

Apply DLP Controls to Prevent Data Loss

⏱ ~90 minutes⚗ Lab Tenant (Read/Write)👤 Alex + KevinLabs 5 – 8

Alex moves from visibility to protection: build detection logic in Lab 5, configure and test Inline Web and Endpoint DLP in Labs 6–7, then test preconfigured Browser DLP controls in Lab 8 as Kevin. The DP Project Code engine combines Credit Cards AND ABA Bank Routing Number AND the custom DP Project Code dictionary; Labs 6 and 7 reuse it. Lab 8 uses separate preconfigured policies for masking, sensitive-download blocking, and watermarking.

🔄

Confirm Tenant Switch
Use CloudShare → Credentials → Zscaler Tenant / Student Admin to log into the Lab Tenant (Tenant 2). Complete Pre-Requisites for Module 2 before Lab 5: allow 15 minutes for VM and Client Connector setup, including verification that SSL/TLS inspection applies to the lab HTTPS traffic. Labs 5–7 build detection and enforcement policies; Lab 8 uses preconfigured browser policies and its separate extension login.

Module Objectives

Question	Capability
What defines sensitive data?	DLP Dictionaries
How is sensitive data detected?	DLP Engines
How is data protected during network transfer?	Inline Web DLP
How are file reads and pastes controlled on the device?	Endpoint DLP — Application File Access & Clipboard
How do browser controls mask text, block sensitive downloads, and watermark a document view?	Preconfigured Browser DLP

Labs in This Module

5

Build Detection Logic — Dictionaries & Engines

How do we define and detect sensitive data?

15 minAlex→

6

Inline DLP — Web Upload Control

How do we stop data leaving via the network?

25 minAlex + Kevin→

7

Endpoint DLP — Clipboard & Application File Access

How do we stop data exfiltration that never touches the network?

25 minAlex + Kevin→

8

Browser DLP — Masking, Downloads & Watermarks

How do we protect sensitive data during browser interactions?

25 minKevin→