> For the complete documentation index, see [llms.txt](https://wiki.songer.pro/interviewing/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.songer.pro/interviewing/security-domains-and-technical-aptitude/data-classification-and-handling-empty/dlp/data-exfiltration.md).

# Data Exfiltration

## What measures do you take to prevent data exfiltration?

<details>

<summary>Monitor Network Traffic</summary>

Regularly monitor and analyze network traffic for malicious or suspicious activity.

</details>

<details>

<summary>Use Data Loss Prevention (DLP) Software</summary>

Deploy DLP software that provides visibility into sensitive data across the network and can detect attempted data exfiltration.

</details>

<details>

<summary>Implement Encryption</summary>

Encrypt data that needs to be transferred over the network or stored on removable media to prevent it from being accessed by unauthorized personnel.

</details>

<details>

<summary>Limit Access to Sensitive Data</summary>

Limit access to sensitive data to only those personnel who need it in order to perform their duties.

</details>

<details>

<summary>Develop an Incident Response Plan</summary>

Develop an incident response plan to quickly and effectively respond to any data exfiltration attempts.

</details>

<details>

<summary>Monitor User Activity</summary>

Monitor user activity to detect any suspicious or unauthorized access to sensitive data.

</details>

<details>

<summary>Use Firewalls and Intrusion Detection Systems</summary>

Deploy firewalls and intrusion detection systems to detect and block malicious traffic and data exfiltration attempts.

</details>