which of the following would best reduce the data leakage threat?