What inspects data that is egressing a network and prevents certain sensitive data - based on defined policies - from leaving the network?

Secure Sockets Layer (SSL) provides cryptographic security for data in transit, primarily focusing on encryption and authentication between a client and a server, rather than content-aware data egress inspection.

Public Key Infrastructure (PKI) manages digital certificates and public/private key pairs to enable secure communication and authentication, but it does not inspect outgoing data content for sensitive information.

Internet Protocol Security (IPsec) is a suite of protocols that provides cryptographic protection for IP communications at the network layer, ensuring data confidentiality, integrity, and authenticity for entire packets, but not for application-layer sensitive content inspection.

Data Loss Prevention (DLP) solutions actively monitor, detect, and block the unauthorized transmission of sensitive data outside an organization's control. They achieve this by inspecting content in transit, at rest, and in use, ensuring compliance with data protection policies and preventing data exfiltration.