Exam SY0-701 topic 1 question 106 discussion

Apply classifications to the data is the correct first step because it establishes a foundational understanding of what data is sensitive and needs protection. By classifying the data, the security administrator can ensure that subsequent DLP policies are effectively tailored to prevent the exfiltration of sensitive customer data, while minimizing unnecessary restrictions on non-sensitive data.

• C. Apply classifications to the data. First Action

Apply classifications to the data

You must apply classifications to the data, so the DLP will be able to identify sensitive data.

its asking what to do FIRST/ How would users know what not to send out if data is not classified

first classify the information

Applying a DLP solution to prevent data being 'leaked' out of the company, usually through email, USB or tools like Steganography. Once installed the first thing he should do is create a rule to either warn or block email attachments. It's nothing to do with cloud storage or server file permissions and we don't need data classification for DLP to work (although it might be a nice option).

DLP (Data Loss Prevention)

C. Apply classifications to the data.