What does the Block action do in a Data Loss Prevention policy?

What does the Block action do in a Data Loss Prevention policy?

• A. Stops the users from being able to copy the file from the shared drive
• B. Alerts the user and logs the event
• C. Encrypts the file before transmission
• D. Remedies the data after exposure

Answer: (A)

Block in a Data Loss Prevention policy is a preventive control that stops a disallowed action in real time. When content matches the policy (for example, sensitive data on a shared drive) and someone tries to copy that file, the Block action prevents the operation from completing, keeping the data from leaving the repository. Some implementations may show a brief block message and log the event for auditing, but the essential effect is preventing the action. The other options describe monitoring without blocking, encrypting data, or remediating after exposure, which are different capabilities and do not define the Block action.

Block in a Data Loss Prevention policy is a preventive control that stops a disallowed action in real time. When content matches the policy (for example, sensitive data on a shared drive) and someone tries to copy that file, the Block action prevents the operation from completing, keeping the data from leaving the repository. Some implementations may show a brief block message and log the event for auditing, but the essential effect is preventing the action. The other options describe monitoring without blocking, encrypting data, or remediating after exposure, which are different capabilities and do not define the Block action.