CompTIA Cloud+ (CV0-004)SecurityMedium
A cloud security engineer is tasked with implementing a data loss prevention (DLP) solution for sensitive customer data stored in a public cloud object storage service. The solution must identify, monitor, and protect data both at rest and in transit. Which of the following best describes the primary function of a DLP solution in this scenario?
- ATo provide a centralized logging and monitoring platform for all cloud security events.
- BTo encrypt all data stored in the object storage service to prevent unauthorized access.
- CTo enforce strong authentication and authorization policies for accessing the object storage.
- DTo detect and prevent sensitive information from leaving the organization's control.
Show answer & explanationAnswer & explanation
Correct answer: D. To detect and prevent sensitive information from leaving the organization's control.
Data Loss Prevention (DLP) solutions are specifically designed to detect and prevent sensitive data from being exfiltrated or shared inappropriately. While encryption, logging, and access controls are important security measures, they do not directly perform the function of preventing data loss as DLP does.
Why the other options are wrong
- A. Centralized logging and monitoring is a function of Security Information and Event Management (SIEM) or cloud native logging services, not DLP.
- B. Encryption protects data confidentiality but is not the primary function of DLP itself, which focuses on preventing data exfiltration.
- C. Strong authentication and authorization are functions of Identity and Access Management (IAM), not the primary role of a DLP solution.
Data Loss Prevention (DLP)
Data Loss Prevention (DLP) refers to a set of tools and processes used to ensure that sensitive data is not lost, misused, or accessed by unauthorized users.
- Identifies and classifies sensitive information.
- Monitors data movement across networks, endpoints, and cloud storage.
- Enforces policies to prevent unauthorized data transfer or sharing.
Memory trick: DLP: Don't Let PII Leak!