CompTIA Security+ SY0-701 Practice Question

Implementing a solution at network egress points is the most effective strategy to mitigate the risk of sensitive data being shared with external parties. Such systems are engineered to scrutinize outgoing information and enforce organizational policies to prevent unauthorized data transfer. By setting up strict rules that analyze the content and context of data being transmitted, the system can detect potential breaches and block the dissemination of sensitive information, especially through emails. While full disk encryption safeguards data at rest, it does not control data being sent out. Access control enhancements may restrict who can access sensitive data but do not necessarily govern the unauthorized transmission of the information. Antivirus applications typically protect against threats like malware and viruses, and may not have the necessary capabilities to prevent data exfiltration.