A security architect is working in a processing center and must implement a DLP solution to detect and prevent any type of copy and paste attempts of sensitive data within unapproved applications…

DLP for data in motion inspects data traversing the network such as email or web uploads, and does not cover local clipboard or removable device interactions.

'DLP for removable data' is not a recognized standard DLP architectural category - removable device control is a function of data in use DLP.

DLP for data in use monitors and enforces policy on data that is actively being processed, accessed, or manipulated by end users in real time. This includes clipboard operations such as copy and paste, as well as attempts to transfer data to removable storage devices like USB drives. Endpoint DLP agents enforce these controls directly on the workstation where the user interaction occurs.

DLP for data at rest discovers and protects sensitive data stored in repositories, file shares, and databases, and does not monitor active user interactions like copy and paste.