Which description best captures the scope of Data Loss Prevention (DLP)?

### Why this is right Data Loss Prevention (DLP) is described as a capability for detecting sensitive data in three states: in motion, in use, and at rest. That scope covers data being transmitted, handled, or stored. ### The concept DLP applies data-handling policies to sensitive information. It can detect insecure transmission, storage, or handling, such as patient information sent in clear text or copied to removable media. Depending on the policy and confidence in detection, a DLP solution may alert, encrypt data, or move it. ### The other options - **B. Capturing only full network packets.** Packet capture records network traffic; it is not the definition of DLP. - **C. Monitoring only endpoint configuration changes.** Endpoint Detection and Response monitors endpoint activity, which is distinct from DLP's data-focused role. - **D. Correlating only authentication logs across a network.** Correlation is a function associated with a Security Information and Event Management system, not the scope of DLP. ### Terms - **Data in motion**: Data being transmitted between systems or parties. - **Data at rest**: Data stored in a location rather than currently being transmitted. ### Remember DLP follows sensitive data across transmission, use, and storage.