Which of the following is a reason to implement data classification as part of data leakage prevention?

• A. It helps apply appropriate DLP policies based on data sensitivity
• B. It makes encryption unnecessary
• C. It guarantees zero data leakage
• D. It allows unrestricted data sharing with external parties

Answer: (B)

Data classification enables applying appropriate DLP policies based on data sensitivity. When data is labeled by how sensitive it is (for example, public, internal, confidential, or restricted), the DLP system can tailor protections accordingly. Highly sensitive data can trigger stricter controls—like blocking external sharing, requiring encryption, or higher‑level monitoring—while less sensitive data can have lighter protections. This targeted policy enforcement is what makes classification a key part of preventing leaks.

The other ideas don’t fit as the best reason: encryption isn’t rendered unnecessary by classification—encryption is still often needed and classification helps decide when to use it. No system can guarantee zero leakage, so it’s not a valid guarantee. And DLP aims to prevent unrestricted sharing with external parties, not enable it.