Which of the following capabilities would BEST defend against this type of sensitive data exfiltration?

A team of network security analysts is examining network traffic to determine if sensitive data was exfiltrated. Upon further investigation, the analysts believe confidential data was compromised.

Which of the following capabilities would BEST defend against this type of sensitive data exfiltration?
A . Deploy an edge firewall.
B . Implement DLP
C . Deploy EDR.
D . Encrypt the hard drives

View Answer

Answer: B

Explanation:

DLP, or Data Loss Prevention, is a cybersecurity solution that detects and prevents data breaches. It blocks the extraction of sensitive data and prevents the unauthorized or inappropriate sharing, transfer, or use of data. It also helps organizations comply with data protection regulations and policies1 DLP can help defend against sensitive data exfiltration by monitoring and controlling data movement across networks, devices, applications, and cloud services. DLP can also alert or block users from sending or uploading sensitive data to untrusted destinations or recipients.

Reference: 1 What is data loss prevention (DLP)? | Microsoft Security