CertNexus Certified Cyber Secure Coder (CSC) — Question 90

An organization recently suffered a breach due to a human resources administrator emailing employee names and Social Security numbers to a distribution list. Which of the following tools would help mitigate this risk from recurring?

Answer options

• A. Data loss prevention (DLP)
• B. Firewall
• C. Web proxy
• D. File integrity monitoring

Correct answer: A

Explanation

Data loss prevention (DLP) tools are specifically designed to prevent sensitive information from being sent outside the organization, making them effective in this scenario. A firewall controls traffic but does not monitor data being sent in emails, while a web proxy focuses on web traffic filtering. File integrity monitoring is used to detect unauthorized changes to files, but it does not prevent data leaks like the one described.