Performing CyberOps Using Cisco Security Technologies (CBRCOR) — Question 96

A security architect is working in a processing center and must implement a DLP solution to detect and prevent any type of copy and paste attempts of sensitive data within unapproved applications and removable devices. Which technical architecture must be used?

Answer options

• A. DLP for data in motion
• B. DLP for removable data
• C. DLP for data in use
• D. DLP for data at rest

Correct answer: C

Explanation

The correct answer is C, DLP for data in use, as it specifically addresses the need to monitor and control data being actively worked on, which includes copy and paste actions. Options A and D focus on data during transmission and storage, respectively, while B pertains to removable data, none of which address the real-time handling of sensitive data in unauthorized applications.