CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ96

VerifiedIncident Detection and Response

A bank employee has been discovered exfiltrating sensitive information by uploading it through email. Which of the following security controls would be MOST effective for detecting this kind of insider threat?

Explanation

Data loss prevention (DLP) inspects email content and attachments for defined sensitive-information types and can generate alerts when a policy match occurs. This directly detects attempts to send sensitive bank information through email.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!