Which type of DLP system scans files on devices such as printers and USB drives?

The correct answer is Endpoint-Based DLP. This type of Data Loss Prevention (DLP) system is designed to protect sensitive data at the endpoints, which include devices like computers, printers, USB drives, and mobile devices. Endpoint-Based DLP monitors and controls data transfers on these devices to prevent unauthorized access, sharing, or storage of sensitive information.

The primary function of Endpoint-Based DLP is to ensure that data is secure as it resides on individual devices, making it an essential part of a comprehensive security strategy. By scanning files on these endpoints, it can enforce policies regarding data handling, encryption, and user permissions, thereby reducing the risk of data leakage.

In contrast, Cloud-Based DLP focuses on protecting data stored and processed in cloud environments, while Network-Based DLP monitors data moving across the network but does not directly scan files on local devices. Remote DLP is not a standard term within DLP discussions and often refers to broader remote access scenarios rather than specifying the focus on endpoint devices.