Question
Several unlabeled documents in a cloud document repository contain cardholder information. Which of the following configuration changes should be made to the DLP system to correctly label these documents in the future?
- A. Digital rights management
- B. Network traffic decryption
- C. Regular expressions Correct
- D. Watermarking
Explanation
Cardholder data such as primary account numbers follows predictable patterns, so a DLP system identifies and labels it using regular expressions (often combined with a Luhn checksum). Digital rights management and watermarking protect or mark content after it is classified, and network traffic decryption only lets the DLP inspect encrypted traffic; none of them recognizes the data at rest in the repository.
