Exam 712-50 topic 1 question 403 discussion

Classification is key .. however the issue here is the data was lost so it is an implementation issue that means the risk assessment needs to be performed. Answer D.

Before doing a classification, you must see the risks. After assessing the risk, you can consider on the practical actions for implementing DLP policies over enforcing data classifications, sensitivity matrixes, etc to mitigate those risks. Correct answer is D.

The MOST likely reason why the sensitive data was posted to Dark Web sites in this scenario is option B: Data classification was not properly performed on the assets. Data classification is a crucial step in implementing a Data Loss Prevention (DLP) solution. It involves identifying and categorizing the organization's data based on its sensitivity and importance. By properly classifying data, organizations can apply appropriate security controls and policies to protect sensitive information from unauthorized disclosure or leakage.

B. Data classification was not properly performed on the assets without data classification the DLP is useless.