Certified Cloud Security Professional – CCSP – Question216

A DLP solution/implementation has three main components.
Which of the following is NOT one of the three main components?

A.
Monitoring
B. Enforcement
C. Auditing
D. Discovery and classification

Correct Answer: C

Explanation:

Explanation: Auditing, which can be supported to varying degrees by DLP solutions, is not a core component of them. Data loss prevention (DLP) solutions have core components of discovery and classification, enforcement, and monitoring. Discovery and classification are concerned with determining which data should be applied to the DLP policies, and then determining its classification level. Monitoring is concerned with the actual watching of data and how it’s used through its various stages. Enforcement is the actual application of policies determined from the discovery stage and then triggered during the monitoring stage.