Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?

Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?

• A. DLP
• B. WIP
• C. LOIC
• D. HOIC

Answer: (B)

The idea being tested is how to keep corporate data contained on authorized devices and apps. Windows Information Protection does this by enforcing policies at the endpoint that ensure business data can only be opened, edited, and saved within approved apps and on managed devices. It isolates corporate data from personal apps and untrusted cloud services, preventing moves like saving to a non‑corporate location or copying data into unmanaged apps. DLP plays a broader role in detecting and blocking risky data movement across channels, but it doesn’t inherently enforce that data stay only on specific devices and apps on endpoints. The other options are unrelated to data protection on endpoints.

The idea being tested is how to keep corporate data contained on authorized devices and apps. Windows Information Protection does this by enforcing policies at the endpoint that ensure business data can only be opened, edited, and saved within approved apps and on managed devices. It isolates corporate data from personal apps and untrusted cloud services, preventing moves like saving to a non‑corporate location or copying data into unmanaged apps. DLP plays a broader role in detecting and blocking risky data movement across channels, but it doesn’t inherently enforce that data stay only on specific devices and apps on endpoints. The other options are unrelated to data protection on endpoints.