Which DLP Control Stops It?

About this interactive

The Data Loss Prevention lesson draws one line first: data loss detection notices that data is where it should not be; data loss prevention takes steps to stop the loss. DLP is often a software product that does both. Block removable media. Thumb drives, external disks and phones used as storage let sensitive data walk out of the building. Blocking them means it is never stored there. Block printing. Paper leaves the building just as easily. Control the clipboard. Whatever is copied sits on the clipboard and can be pasted somewhere it should not go, so clear it or set privacy controls on it. Use virtual desktop infrastructure. Staff who connect from home can download files to their own computers, and then the data is outside the network. With VDI they work on virtual machines in the company's data center, and anything they download lands on the virtual machine, so it never leaves. Block by classification. Once data is tagged with metadata as internal, confidential or restricted, email and other systems can recognize it and stop it from leaving before it is sent. A quick test for each card: how is the data about to leave, and which control closes that route?

What you'll learn

Choose the data loss prevention control that would stop a described leak: removable media blocking, print blocking, clipboard controls, virtual desktop infrastructure or classification blocking
Recognize that prevention acts to stop the data leaving, where detection only notices that it has

Aligned to

CompTIA Security+

4.5 Given a scenario, modify enterprise capabilities to enhance security.

4.4 Explain security alerting and monitoring concepts and tools.

NIST 800-53

MP-7 Media Use

Key terms

Data Loss Prevention: A set of tools and processes designed to detect and prevent unauthorized access, use, or transmission of sensitive data.
Removable Media Blocking: A DLP control that prevents the use of external storage devices to stop sensitive data from being copied or transported outside the organization.
Print Blocking: A DLP control that restricts users from printing sensitive documents to prevent physical data leakage.
Virtual Desktop Infrastructure: A virtualization technology in which desktop operating systems run as virtual machines on centralized servers and are delivered to end-user devices over a network. VDI simplifies desktop management, improves security, and allows users to access their desktop environment from any device.
Classification-Based Filtering: A DLP control that uses data classification labels or metadata to detect and block sensitive information from leaving the organization through channels such as email.
Data Exfiltration: The unauthorized transfer of data from a system to an external destination.

Topics

Data Loss Prevention Prevention Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →