CompTIA Cloud Essentials+ (CLO-002)Governance, Risk, Compliance and SecurityMedium
An organization deploys a tool that continuously scans outbound emails and file uploads for patterns matching Social Security numbers and credit card numbers, automatically blocking any transmission that contains this sensitive data. This tool is an example of which type of technology?
- AIdentity Federation
- BSecurity Information and Event Management (SIEM)
- CData Loss Prevention (DLP)
- DVirtual Private Network (VPN)
Show answer & explanationAnswer & explanation
Correct answer: C. Data Loss Prevention (DLP)
Data Loss Prevention (DLP) tools monitor and control data in motion, at rest, or in use to prevent unauthorized exfiltration of sensitive information, often by scanning for patterns like SSNs or credit card numbers and blocking matching transmissions.
Why the other options are wrong
- A. Identity federation allows shared authentication across domains, unrelated to data exfiltration prevention.
- B. SIEM aggregates and analyzes security logs and events, not specifically content scanning of outbound data.
- D. A VPN encrypts network traffic between endpoints but does not inspect content for sensitive data patterns.
Data Loss Prevention (DLP)
A security technology that monitors, detects, and blocks unauthorized transmission or exposure of sensitive data across networks, endpoints, and storage.
- Scans data in motion, at rest, and in use
- Uses pattern matching (e.g., regex for SSNs, card numbers)
- Acts as both a detective and preventive control
- Helps enforce data classification policies
Memory trick: 'DLP is the bouncer at the data door' checking for sensitive patterns.