Which strategy is used to prevent leakage of sensitive data in cloud storage and databases?

• A. Data sharing publicly to all users.
• B. Disable encryption to speed up access.
• C. Only rely on user education.
• D. Data loss prevention detects and blocks exfiltration.

Answer: (D)

Data loss prevention is used to stop sensitive data from leaving cloud storage and databases. It works by defining policies that identify sensitive data (such as PII, financial information, or health records) and then monitoring data flows and storage for those patterns. When potential exfiltration is detected, it can block the transfer, quarantine the data, enforce encryption or masking, and alert administrators. This automated, policy-driven protection is essential across cloud storage and databases because it continuously safeguards data across multiple channels, not just at one point in time. The other options don’t fit because publicly sharing data increases leakage risk, turning encryption off removes a critical safeguard, and relying only on user education doesn’t provide automated prevention or enforcement.