Exam SY0-601 topic 1 question 442 discussion

If the security program is prohibiting the upload of the tax document because it contains personally identifiable information (PII), the appropriate step for the security analyst to take would be to modify the exception list on the Data Loss Prevention (DLP) system to allow the upload. The DLP system is designed to prevent the unauthorized transmission of sensitive information, such as PII. In this case, the system is correctly identifying the tax document as containing PII, and therefore, blocking the upload. However, if the finance department has requested the document and it is necessary for business purposes, the security analyst can modify the DLP exception list to allow the upload. Creating a URL filter or issuing a new device certificate to the user's workstation are not relevant in this scenario. Adding a firewall rule to the outbound proxy to allow file uploads may potentially allow the upload, but it does not address the root cause of the issue, which is the presence of PII in the document.

D. Modify the exception list on the DLP to allow the upload

D. Modify the exception list on the DLP to allow the upload.

D is correct D. Modify the exception list on the DLP to allow the upload would be the best step the security analyst can take to correct the issue. The security program is blocking the upload because it has identified PII in the file. This indicates that the organization has a Data Loss Prevention (DLP) program in place that is configured to prevent the unauthorized transfer of sensitive data.