Compare continuous monitoring vs point-in-time scanning in DLP.

• A. They are the same thing
• B. Continuous monitoring watches data flows in real time; point-in-time scanning inventories data at a snapshot; both support discovery and enforcement.
• C. Continuous monitoring is slower
• D. Point-in-time scanning never supports enforcement

Answer: (B)

Continuous monitoring in DLP means watching data flows in real time, so policy checks and enforcement can happen as data moves across networks, across endpoints, and in cloud services. Point-in-time scanning, on the other hand, takes a snapshot at a specific moment to inventory where sensitive information sits and to classify it. These modes differ in timing, but both can support discovery (finding sensitive data) and enforcement (applying policy actions). Continuous monitoring provides ongoing, immediate enforcement as data is transmitted or accessed, while point-in-time scanning is useful for periodic audits and initial data discovery, with enforcement applied to the results as configured. The idea that they are the same thing isn’t accurate, and the notion that continuous monitoring is inherently slower or that point-in-time scanning never enforces isn’t correct, since scans can trigger policy actions and enforcement can be part of both approaches.