ISC2 CISSP Practice Question

The correct answer is implementing Data Loss Prevention (DLP) solutions with content inspection. DLP systems are specifically designed to monitor and control data in motion (network traffic), data at rest (stored data), and data in use (endpoint activities). DLP with content inspection can analyze outbound traffic to identify sensitive information patterns like credit card numbers, intellectual property, or personally identifiable information, and block unauthorized transmission attempts.

Firewall rules based on geographical locations alone would be insufficient as they can't inspect traffic content to identify sensitive data. Network traffic analysis tools without DLP capabilities might detect unusual traffic patterns but lack specialized content inspection features needed for identifying specific sensitive data types. SSL decryption alone would make encrypted traffic visible but doesn't provide the advanced content analysis and policy enforcement capabilities that DLP solutions offer for preventing data exfiltration.