Data Loss Prevention (DLP) is best described as which?

Data Loss Prevention (DLP) is best described as which?

• A. Techniques to prevent data exfiltration.
• B. A method to delete data after a breach.
• C. A type of encryption standard.
• D. A policy that allows unrestricted data transfer.

Answer: (A)

DLP is about preventing data exfiltration. It uses discovery, classification, and policy enforcement across endpoints, networks, and storage to detect sensitive information being moved, copied, or shared outside the organization and then block or alert on those actions. For example, if someone tries to email a document containing PII, DLP can flag it, prevent the send, and notify security. This isn’t about deleting data after a breach, which is incident response, nor about a cryptographic encryption standard, which focuses on protecting data by encryption. It also isn’t a policy that allows unrestricted data transfer; its purpose is to restrict and control transfers of sensitive data.

DLP is about preventing data exfiltration. It uses discovery, classification, and policy enforcement across endpoints, networks, and storage to detect sensitive information being moved, copied, or shared outside the organization and then block or alert on those actions. For example, if someone tries to email a document containing PII, DLP can flag it, prevent the send, and notify security.

This isn’t about deleting data after a breach, which is incident response, nor about a cryptographic encryption standard, which focuses on protecting data by encryption. It also isn’t a policy that allows unrestricted data transfer; its purpose is to restrict and control transfers of sensitive data.