Exam CFR-310 topic 1 question 18 discussion

A. Data Loss Prevention (DLP) Explanation: Data Loss Prevention (DLP) is designed to prevent sensitive data (such as Social Security numbers or employee information) from being shared or leaked outside the organization. DLP can monitor and block sensitive data being sent via email, preventing accidental or malicious data breaches. Why the other answers are incorrect: B. Firewall: A firewall controls network traffic based on rules but does not inspect email content or prevent sensitive information from being sent out. C. Web proxy: A web proxy filters and monitors web traffic but does not control what is shared in emails. D. File integrity monitoring: This tool monitors changes to files and directories, ensuring data integrity, but it does not prevent sensitive data from being emailed.

The answer is A. Data loss prevention (DLP). In this case, a DLP solution could be used to prevent the human resources administrator from emailing employee names and Social Security numbers to a distribution list. The DLP solution would scan the email for sensitive data and block the email from being sent if it contains sensitive data.