DLP (Data Loss Prevention)

DLP helps prevent sensitive data from being leaked or exfiltrated.

Updated: 2026-03-05

Definition

Data Loss Prevention (DLP) detects and blocks sensitive data exposure (e.g., credit card numbers, personal data) via email, endpoints, and cloud services.

DLP policies can monitor, alert, encrypt, quarantine, or block actions depending on rules.

Key points

Focus: prevent data leakage
Works across email/endpoint/cloud channels
Requires classification and tuning

Common mistakes

Deploying without understanding what data is sensitive (poor classification).
Too many false positives causing users to bypass controls.

Related exams

CompTIA Security+ (SY0-701)

Free Security+ SY0-701 mini test. Continue in the app for offline packs and detailed explanations.

Related terms

what is data classification
what is encryption
what is casb

Want to practice this in exam-style questions?

Use the mini tests on each exam page, then continue in the app for offline packs and detailed explanations.

Go to exams