A large bank deployed a DLP solution to detect and block customer and credit card data from
leaving the organization via email. A disgruntled employee was able to successfully exfiltrate data
through the corporate email gateway by embedding a word processing document containing
sensitive data as an object in a CAD file. Which of the following BEST explains why it was not
detected and blocked by the DLP solution? (Select TWO).
A.
The product does not understand how to decode embedded objects.
B.
The embedding of objects in other documents enables document encryption by default.
C.
The process of embedding an object obfuscates the data.
D.
The mail client used to send the email is not compatible with the DLP product.
E.
The DLP product cannot scan multiple email attachments at the same time.