An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to email these files outside of the organization. Which of the following best…

Question

Options

• ADLP
• BSNMP traps
• CSCAP
• DIPS

• A
  84% (16)
• C
  5% (1)
• D
  11% (2)

Explanation

DLP (Data Loss Prevention) is the correct answer because it is specifically designed to monitor, detect, and block sensitive data from leaving an organization - including via email. The ability to "fingerprint" specific files and trigger alerts when those files are transmitted externally is a hallmark DLP capability called content fingerprinting or document fingerprinting.

Why the distractors are wrong:

• SNMP traps (B) are network management alerts used to report device status or failures - not for monitoring file content or preventing data exfiltration.
• SCAP (C) (Security Content Automation Protocol) is a framework for automating vulnerability management and compliance checking, not for monitoring data in transit.
• IPS (D) (Intrusion Prevention System) detects and blocks malicious network activity based on attack signatures, not on the identity or content of specific organizational files.

Memory tip: Think of DLP = Data Leakage Prevention - if the scenario involves sensitive data leaving the organization (email, USB, cloud upload), the answer is almost always DLP. The key phrase "fingerprint specific files" is a strong DLP giveaway on exams.

No community discussion yet for this question.