Which notification option is documented as a method for alerting after a policy match?

Which notification option is documented as a method for alerting after a policy match?

• A. System reboot prompts
• B. Data backup
• C. Email alerts to users or managers
• D. Pop-up prompts

Answer: (C)

When a policy match occurs, the purpose of alerting is to promptly notify the right people so they can respond. Email alerts to users or managers are the documented method for this in DLP. Email allows timely, centralized communication with detailed information about the incident—such as which policy was triggered, what data was involved, where it occurred, who performed the action, and when—and it can be delivered to the appropriate recipients with options for escalation and auditing. Other options don’t fit as notification methods. System reboot prompts are about forcing a restart, not informing stakeholders. Data backup is a protective action, not a notification. Pop-up prompts are user-facing enforcement prompts on endpoints, which are actions the user must see and respond to, rather than a formal notification to designated recipients.

When a policy match occurs, the purpose of alerting is to promptly notify the right people so they can respond. Email alerts to users or managers are the documented method for this in DLP. Email allows timely, centralized communication with detailed information about the incident—such as which policy was triggered, what data was involved, where it occurred, who performed the action, and when—and it can be delivered to the appropriate recipients with options for escalation and auditing.

Other options don’t fit as notification methods. System reboot prompts are about forcing a restart, not informing stakeholders. Data backup is a protective action, not a notification. Pop-up prompts are user-facing enforcement prompts on endpoints, which are actions the user must see and respond to, rather than a formal notification to designated recipients.