A systems administrator must ensure confidential company information is not leaked to competitors. Which of the following services will BEST accomplish this goal?

CASB (Cloud Access Security Broker) provides visibility and control over cloud service usage but is not primarily designed to prevent data leakage across all channels.

IDS (Intrusion Detection System) monitors network traffic for signs of attacks or unauthorized access but does not inspect or block outbound data based on content classification.

FIM (File Integrity Monitoring) detects unauthorized changes to files and system configurations but does not prevent data from being sent to external parties.

EDR (Endpoint Detection and Response) focuses on detecting and responding to endpoint-based threats such as malware, not on classifying and blocking sensitive data exfiltration.

DLP (Data Loss Prevention) solutions are specifically designed to detect and block the unauthorized transmission of sensitive or confidential data outside the organization. They inspect content across endpoints, networks, and cloud services and enforce policies that prevent data exfiltration to competitors or unauthorized parties. No other listed option is purpose-built for preventing data leakage.