An IT manager is increasing the security capabilities of an organization after a data classification initiative determined that sensitive data could be exfiltrated from the environment. Which of the following solutions would mitigate the risk?

Data Loss Prevention (DLP) is the correct solution because it is designed to prevent sensitive data from leaving the organization's control. After a data classification initiative identifies sensitive data, DLP systems can monitor, detect, and block unauthorized attempts to exfiltrate that data, whether through email, cloud storage, or other channels. Extended Detection and Response (XDR) focuses on threat detection and incident response across various security layers, but its primary function isn't preventing data exfiltration. Sender Policy Framework (SPF) and Domain-based Message Authentication, Reporting, and Conformance (DMARC) are email authentication protocols that help prevent email spoofing and phishing, not general data exfiltration from the environment.