Which of the following controls should the organization consider to mitigate this risk?

An organization discovered a disgruntled employee exfiltrated a large amount of PII data by uploading files.

Which of the following controls should the organization consider to mitigate this risk?
A . EDR
B. Firewall
C. HIPS
D. DLP

View Answer

Answer: D

Explanation:

DLP stands for data loss prevention, which is a set of tools and processes that aim to prevent unauthorized access, use, or transfer of sensitive data. DLP can help mitigate the risk of data exfiltration by disgruntled employees or external attackers by monitoring and controlling data flows across endpoints, networks, and cloud services. DLP can also detect and block attempts to copy, print, email, upload, or download sensitive data based on predefined policies and rules.

References:

https://www.comptia.org/certifications/security#examdetails https://www.comptia.org/content/guides/comptia-security-sy0-601-exam-objectives https://www.forcepoint.com/cyber-edu/data-loss-prevention-dlp