The expression "vector of data loss and exfiltration" refers to how data leaves the organization without authorization.
「資料遺失與外洩的向量」一詞，指的是資料未經授權離開組織的方式。
Common vectors of data loss and exfiltration include the following:
資料遺失與外洩的常見向量包括以下幾種：
- Email attachments: Email attachments often contain sensitive information like confidential corporate, customer, and personal data. The attachments can leave the organization in various ways. For example, the email with the attachment might be intercepted, or a user might accidentally send the email to the wrong person.電子郵件附件：電子郵件附件經常包含機密的公司、客戶及個人資料等敏感資訊。這些附件可能以各種方式流出組織，例如含有附件的電子郵件遭到攔截，或使用者不慎將郵件寄給錯誤的人。
- Unencrypted devices: Smartphones and other personal devices are often protected only with a password. Employees sometimes send sensitive company information to these devices. While the data may be encrypted while traversing the internet to the device, it can be unencrypted when it lands on the personal device. If the device password is compromised, an attacker can steal corporate data and perhaps even gain unauthorized access to the company network.未加密的裝置：智慧型手機及其他個人裝置通常只以密碼保護。員工有時會將敏感的公司資訊傳送到這些裝置上。雖然資料在透過網際網路傳輸到裝置的過程中可能是加密的，但一旦到達個人裝置後可能就變成未加密狀態。若該裝置的密碼遭到破解，攻擊者便能竊取公司資料，甚至可能因此取得對公司網路的未授權存取。
- Cloud storage services: Company employees are often tempted to transfer large files by using cloud storage services of their own choosing without the approval of the company's IT department. The result can be theft of sensitive documents by someone like a social network "friend" with whom the employee shares a directory on the cloud storage server.雲端儲存服務：公司員工經常在未經公司 IT 部門核准的情況下，選擇使用自己偏好的雲端儲存服務來傳輸大型檔案。結果可能導致敏感文件遭到竊取，例如被員工在雲端儲存伺服器上共用目錄的社群網路「朋友」所竊取。
- Removable storage devices: Putting sensitive data on a removable storage device may pose more of a threat than putting that data on a smartphone. Such devices are not only easily lost or stolen; they also typically do not have passwords, encryption, or any other protection for the data they contain. While such protection for removable storage devices is available, it is relatively expensive and infrequently used as of this writing.卸除式儲存裝置：將敏感資料存放在卸除式儲存裝置上，可能比存放在智慧型手機上帶來更大的威脅。這類裝置不僅容易遺失或遭竊，通常也沒有密碼、加密或其他任何保護所含資料的機制。雖然市面上已有針對卸除式儲存裝置的此類保護方案，但截至目前為止相對昂貴且使用並不普遍。
- Improper access controls: Without proper access controls such as access control lists on firewalls, the risk of data loss is high. Organizations can lower their risk of data loss by fine-tuning access controls and patching known vulnerabilities.存取控制不當：若缺乏適當的存取控制（例如防火牆上的存取控制清單），資料遺失的風險就會很高。組織可以透過微調存取控制及修補已知弱點，來降低資料遺失的風險。
Which two actions represent common vectors of data loss and exfiltration in a company? (Choose two.)以下哪兩個動作是公司中資料遺失與外洩的常見向量？（選擇兩項。）