Several departments within a company have a business need to send high volumes of confidential information to customers via email. Which of the following is the BEST solution to mitigate…

Applying encryption to outbound emails ensures that even if a confidential message is intercepted or delivered to the wrong recipient, the content remains unreadable without the decryption key. This directly addresses the risk of unintentional exposure by protecting the data in transit and at rest in the recipient's mailbox.

Exact data matching with DLP applied to inbound emails protects against data entering the organization, not confidential data leaving it; the question is about outbound confidential information.

Hashing produces a one-way digest used for integrity verification and cannot be reversed to recover the original data, making it unsuitable for protecting confidential content that recipients need to read.

Encrypting inbound emails with DLP addresses data coming into the organization, which is the opposite of the outbound confidentiality requirement described.