Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

DLP works in which layer of the ISO model?

1. 7, application layer

2. 5, session layer

3. 4, transport layer

4. 3, network layer

The correct answer is: 7, application layer

Data Loss Prevention (DLP) primarily operates at the application layer of the OSI model. This layer, which is layer 7, is responsible for enabling end-user services and ensuring that applications can communicate over a network. DLP focuses on identifying, monitoring, and protecting sensitive data that may be in use, in motion, or at rest. Because DLP solutions often integrate with applications directly to enforce policies regarding data usage—such as preventing unauthorized sharing of sensitive information—operating at the application layer allows DLP to analyze and control data flows effectively. This includes inspecting the content of files and communications to detect any sensitive information that should not be transmitted or stored inappropriately. This operation at the application layer is critical for the effectiveness of DLP solutions, as they need visibility into the data being transmitted by various applications and the ability to apply security policies based on the content being processed.