CompTIA Security+ (SY0-601) — Question 744

A security analyst has received an alert about PII being sent via email. The analyst's Chief Information Security Officer (CISO) has made it clear that PII must be handled with extreme care. From which of the following did the alert MOST likely originate?

Answer options

• A. S/MIME
• B. DLP
• C. IMAP
• D. HIDS

Correct answer: B

Explanation

The correct answer is B, as Data Loss Prevention (DLP) systems are specifically designed to monitor and protect sensitive information like PII from unauthorized transmission. The other options, such as S/MIME, are encryption methods, IMAP is an email retrieval protocol, and HIDS refers to host-based intrusion detection systems, none of which primarily focus on detecting the leakage of sensitive data.