CISSP Practice Question: A multinational firm requires a technical solution to automatically classify sensitive data…

Correct Answer: A. Implement a Data Loss Prevention (DLP) system with content inspection and context analysis capabilities.

Explanation (CISSP Manager Logic):

Automated classification ensures consistent policy enforcement and reduces human error across a global enterprise. A DLP solution provides the granular visibility required to identify and protect sensitive assets based on business value and regulatory requirements.

By implementing this solution, you:

• Automate the identification of sensitive data using pattern matching and metadata.
• Reduce exfiltration risk through real-time monitoring and automated blocking.
• Support compliance by maintaining a continuous inventory of classified assets.

While the other options are relevant, they fall short because:

• B: Firewalls focus on traffic filtering and threat prevention rather than granular data content classification.
• C: NAC manages endpoint health and network admission but cannot inspect or classify the data being transmitted.
• D: Manual classification is unscalable, inconsistent, and cannot keep pace with multinational data volumes.

Think like a manager:

Prioritize automated, scalable controls that minimize human intervention and align technical enforcement with the organization’s data governance framework.