hardMultiple ChoiceObjective-mapped
200-201 Implementing a new data classification policy Practice Question
A company is implementing a new data classification policy. The policy defines three levels: Public, Internal, and Confidential. An employee accidentally emails a spreadsheet marked 'Confidential' to an external partner. The email system automatically encrypts all outbound emails containing 'Confidential' classification. Which security control is being demonstrated?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP)
(Data Loss Prevention). DLP systems monitor and control data in motion, at rest, or in use. In this scenario, the email system automatically encrypts outbound emails marked 'Confidential' to prevent unauthorized disclosure, which is a classic DLP control. Option A (Auditing) is incorrect because auditing logs events but does not actively prevent data loss. Option B (Encryption at rest) protects stored data, not data in transit. Option D (Access control) restricts who can access data, but the control here is applied during transmission based on classification, not on access rights.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Auditing
Why it's wrong here
Auditing logs events but does not automatically encrypt outbound emails.
- ✗
Encryption at rest
Why it's wrong here
Encryption at rest protects stored data, not data in transit.
- ✓
Data Loss Prevention (DLP)
Why this is correct
DLP controls can automatically encrypt outbound emails containing sensitive data based on classification.
- ✗
Access control
Why it's wrong here
Access control governs who can access data, not automatic encryption of outbound emails.
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.