What does DLP stand for?
DLP stands for Data Loss Prevention. Controls that detect and block sensitive data leaving where it should stay, for example via email, uploads or USB drives.
DLP tools recognize sensitive content, such as card numbers, health records or files labelled confidential, and apply a rule when that content is about to leave: block, encrypt, warn the user or just log. They work at three points: on the endpoint (copy to USB, print), on the network (email, web upload) and in cloud services. DLP depends on knowing what is sensitive, so data classification comes first.
DLP in practice: an example
An employee attaches a spreadsheet with two thousand customer card numbers to an email addressed outside the company. The DLP rule matches the card-number pattern, blocks the message and tells the user why. The same file sent to a colleague inside the company goes through.
What DLP is confused with
DLP vs CASB: what is the difference?
DLP is the function of spotting and stopping sensitive data. A CASB is a control point for cloud services that often includes DLP among other features. What CASB stands for
Which exams cover DLP?
DLP is on the official CompTIA acronym list for all four exams covered here.
- Security+ SY0-801: 4.1, 4.4 (Security Operations).
- CySA+ CS0-004: on the acronym list, not tied to one objective.
- Network+ N10-009: on the acronym list, not tied to one objective.
- A+ 220-1201 and 220-1202: 220-1202 2.0 (Security).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A company must stop staff from copying files labelled Confidential to USB drives. Where must the DLP control run?
- On the endpoint
- On the DNS server
- On the internet router only
- On the backup tape
Show the answer
A. On the endpoint. A copy to removable media never crosses the network, so only an endpoint agent can see and block it.
2. A DLP project keeps blocking harmless documents and missing sensitive ones. What was most likely skipped?
- Buying more storage
- Data classification
- Wi-Fi site survey
- Changing default gateways
Show the answer
B. Data classification. DLP rules act on what has been defined as sensitive. Without classification and labelling they guess, and guess badly.
Sources: NIST glossary: data loss prevention. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.