Outbound email and file uploads that contain Social Security numbers from municipal systems should be blocked or alerted. Which security control primarily addresses that requirement?
Select an answer to reveal the explanation.
Short Explanation
DLP is the gate guard that spots an SSN in an outbound email or upload and either stops it or raises a flag. You do not have to shut down all mail—just catch the sensitive stuff trying to walk out. Speed-at-all-costs with no content checks is how exfiltration slides through.
Full Explanation
Data loss prevention (DLP) inspects content and context on egress paths to detect sensitive patterns such as SSNs and then block or alert. Blanket mail shutdowns are operationally extreme, while publishing SSNs or disabling content checks increases leakage risk. Cloud+ security controls include DLP to limit sensitive data exfiltration from cloud and hybrid environments.