Exam N10-008 topic 1 question 350 discussion

I keep rereading this and seems to make no sense to be honest. I'm assuming C is correct.

Data loss prevention (DLP) systems are used to ensure that end-users do not send sensitive or critical information outside the corporate network. These DLP products help a network administrator control what data end users can transfer. While an Acceptable Use Policy (AUP), Non-Disclosure Agreement (NDA), or MOU (Memorandum of Understanding) might provide some administrative controls to help mitigate the threat of data loss or theft, a DLP is the BEST solution as it provides a technical way to enforce your policies.

I was searching for Mandatory Access Control.

C. data loss prevention.

C. Data loss prevention is the mandatory component that involves classification using labels according to information sensitivity and impact in case of unauthorized access or leakage. Data loss prevention (DLP) is a set of technologies and policies used to protect sensitive data from unauthorized access, use, and distribution. The classification of data according to its sensitivity and potential impact in case of unauthorized access or leakage is a key component of a DLP strategy. By applying labels to data, organizations can enforce appropriate security policies to prevent data loss or leakage.

Why is it not A ? Anyone can explain?

This is basically saying the mandatory component of data loss prevention is classifying information sensitivity and impact of data leakage or unauthorized access using labels.