A security analyst discovers that a company's username and password database was posted on an Internet
forum. The usernames and passwords are stored in plain text. Which of the following would mitigate the
damage done by this type of data exfiltration in the future?


A. Create DLP controls that prevent documents from leaving the network.
B. Implement salting and hashing.
C. Configure the web content filter to block access to the forum.
D. Increase password complexity requirements.