Certified Information Security Manager (CISM) — Question 535

The MAIN benefit of implementing a data loss prevention (DLP) solution is to:

Answer options

• A. enhance the organization's antivirus controls.
• B. reduce the need for a security awareness program.
• C. complement the organization's detective controls.
• D. eliminate the risk of data loss.

Correct answer: C

Explanation

The correct answer, C, indicates that a DLP solution is designed to enhance existing detection controls by monitoring and protecting sensitive data. Options A and B are incorrect because DLP does not primarily focus on antivirus functions or replace the need for security awareness. Option D is misleading, as while DLP reduces risk, it cannot completely eliminate the possibility of data loss.