A company plans to secure its systems by: - Preventing users from sending sensitive data over corporate email - Restricting access to potentially harmful websites Which of the following features…

Question

Options

• ADLP software
• BDNS filtering
• CFile integrity monitoring
• DStateful firewall
• EGuardrails
• FAntivirus signatures

• A
  71% (20)
• C
  4% (1)
• D
  7% (2)
• E
  4% (1)
• F
  14% (4)

Explanation

DLP (Data Loss Prevention) software directly addresses the first requirement by inspecting outbound communications - including email - and blocking transmissions that contain sensitive content like PII or financial data. DNS filtering addresses the second requirement by intercepting DNS queries and blocking resolution of harmful or unauthorized domains before a connection is even established.

The distractors fail because: File integrity monitoring (C) detects unauthorized changes to files on a system, not data exfiltration or web access; Stateful firewalls (D) track connection state and filter by IP/port, but lack the content inspection needed for email data loss or URL-category blocking; Guardrails (E) is an AI safety concept, not a traditional network security control; Antivirus signatures (F) identify known malware, not outbound data leakage or harmful website categories.

Memory tip: Match the tool to the threat vector - DLP owns the data path (what leaves), DNS filtering owns the domain path (where you go). If the exam describes "sensitive data leaving" think DLP; if it says "block bad sites" think DNS.

No community discussion yet for this question.