What best describes Exact Data Match (EDM) in data security contexts?

• A. A database of hashed files used for malware detection
• B. A policy template used for regulatory alignment
• C. A watermarking technique for documents
• D. A structured database of string values that the DLP searches for until it finds a matching entry

Answer: (D)

Exact Data Match focuses on exact equality checks against a trusted list of sensitive values. In data loss prevention, the system maintains a structured database of specific string values—things like social security numbers, credit card numbers, or other identifiers—and scans data in motion or at rest to see if any piece matches one of those exact entries. When a match is found, appropriate actions can be triggered to protect the data.

This approach emphasizes precision: it flags only exact hits, which helps minimize false positives. It does require careful maintenance of the value repository and secure handling of the list, since the quality of EDM depends on how complete and up-to-date the stored values are. It’s not about detecting malware signatures, applying generic policy templates, or watermarking documents; those serve different purposes and use different techniques.