Certified Cloud Security Professional (CCSP) — Question 239

The share phase of the cloud data lifecycle involves allowing data to leave the application, to be shared with external systems, services, or even other vendors/ contractors.
What technology would be useful for protecting data at this point?

Answer options

• A. IDS
• B. DLP
• C. IPS
• D. WAF

Correct answer: B

Explanation

Data Loss Prevention (DLP) is specifically designed to protect sensitive data from being shared or leaked outside an organization, making it the ideal choice for this phase. In contrast, Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) focus on identifying and preventing unauthorized access, while Web Application Firewalls (WAF) are geared towards protecting web applications from attacks, not specifically data protection during sharing.