Sophos Certified Engineer Practice Exam

To protect sensitive data from being shared, what feature should be enabled?

1. Firewalls

2. Data Loss Prevention

3. Encryption

4. Network Segmentation

The correct answer is: Data Loss Prevention

Data Loss Prevention (DLP) is the feature that should be enabled to protect sensitive data from being shared. DLP solutions are specifically designed to monitor, detect, and restrict the movement of sensitive information outside the organization's network. This includes preventing unauthorized access, sharing, or transmission of data through various channels such as email, cloud storage, and portable devices. DLP policies can be configured to classify data based on its sensitivity and apply controls based on those classifications. It can help ensure that sensitive information, such as personally identifiable information (PII), financial records, or intellectual property, is not inadvertently or maliciously leaked. While firewalls, encryption, and network segmentation are all important components of a comprehensive security strategy, they address different aspects of security. Firewalls act as barriers to prevent unauthorized access to networks, encryption protects data at rest and in transit, and network segmentation involves dividing the network to reduce the attack surface. However, none of these addresses the specific need to monitor and control the sharing of sensitive data as effectively as DLP does.