Question
Which of the following tools would work best to prevent the exposure of PII outside of an organization?
- A. PAM
- B. IDS
- C. PKI
- D. DLP Correct
Explanation
Data loss prevention (DLP) inspects data in use, in motion and at rest, and can block or quarantine content such as PII before it leaves the organization through email, web uploads or removable media. PAM controls privileged account access, an IDS only detects and alerts on suspicious traffic, and PKI provides certificates for encryption and authentication; none of these identifies and stops sensitive data from leaving.