A company plans to secure its systems by: • Preventing users from sending sensitive data over corporate email • Restricting access to potentially harmful websites Which of the following features should the company set up? (Choose two.)

DLP (Data Loss Prevention) software prevents sensitive data from leaving the organization's control, such as blocking emails containing confidential information. DNS filtering restricts access to websites by blocking DNS resolution for known malicious or unauthorized domains, preventing users from reaching harmful sites. File integrity monitoring detects unauthorized changes to critical system files but doesn't directly prevent data exfiltration or website access. A stateful firewall controls network traffic based on rules and connection state but is less granular than DLP for content inspection or DNS filtering for domain-specific blocking. Guardrails are architectural constraints, not a specific security feature for these tasks. Antivirus signatures detect and remove malware but don't prevent data from being sent or restrict website access directly.