Which solution monitors and prevents data leakage?

Which solution monitors and prevents data leakage?

• A. Data Loss Prevention (DLP) Endpoint Software
• B. Audit Log
• C. Network Flow (NetFlow)
• D. Out of band (OOB)

Answer: (A)

Data loss prevention on endpoints is designed to actively watch for sensitive data and stop it from leaving the organization. DLP endpoint software analyzes what the data is, where it’s going, and who is handling it, across activities like email, cloud uploads, USB transfers, printing, clipboard use, and file sharing. When a policy says “don’t send confidential data to external email” or “don’t copy sensitive files to USB,” the DLP agent can block the action, warn the user, or encrypt the data. This combination of monitoring and enforcement directly addresses data leakage. Audits logs, by contrast, record what happened so you can investigate later, but they don’t prevent leakage in real time. NetFlow provides visibility into network traffic patterns, which helps detect anomalies, but it isn’t a control that stops data from leaving. Out-of-band management is about an alternate channel to manage devices, not protecting data. So, the option that both monitors and prevents leakage is Data Loss Prevention (DLP) on endpoints.

Data loss prevention on endpoints is designed to actively watch for sensitive data and stop it from leaving the organization. DLP endpoint software analyzes what the data is, where it’s going, and who is handling it, across activities like email, cloud uploads, USB transfers, printing, clipboard use, and file sharing. When a policy says “don’t send confidential data to external email” or “don’t copy sensitive files to USB,” the DLP agent can block the action, warn the user, or encrypt the data. This combination of monitoring and enforcement directly addresses data leakage.

Audits logs, by contrast, record what happened so you can investigate later, but they don’t prevent leakage in real time. NetFlow provides visibility into network traffic patterns, which helps detect anomalies, but it isn’t a control that stops data from leaving. Out-of-band management is about an alternate channel to manage devices, not protecting data.

So, the option that both monitors and prevents leakage is Data Loss Prevention (DLP) on endpoints.