Centralized authentication (such as Active Directory or LDAP) combined with proper password policies helps prevent the reuse of the same local credentials across multiple systems, reducing the risk of lateral movement during attacks like credential reuse or pass-the-hash.
Reference:
CompTIA Security+ SY0-701 Official Study Guide, Domain 3.1: "Centralized authentication and strong password policies reduce risks associated with local account reuse." Exam Objectives 3.1: "Implement secure network architecture concepts."

Comprehensive and Detailed In-Depth Explanation:
The right to be forgotten, as outlined in regulations such as the General Data Protection Regulation (GDPR), requires organizations to permanently delete an individual's personal data upon request, unless there is a legal or contractual obligation to retain it.
* Purging personally identifiable attributes (A) removes some identifying data but does not fully satisfy the request.
* Encrypting the data (B) does not remove it, and the data is still accessible with the decryption key.
* Obfuscating data (D) makes data unreadable but does not permanently remove it.
To comply with the right to be forgotten, organizations must remove all of the person's data unless an exception applies.

Data classification is required before implementing a Data Loss Prevention (DLP) solution because DLP policies depend on identifying and categorizing sensitive data to monitor, block, or encrypt it accordingly.
Data destruction (A) and sanitization (B) remove data, and masking (D) obscures data but classification is foundational for DLP effectiveness.
Data classification is emphasized in Security Program Management and Data Protection topics#6:Chapter
16 CompTIA Security+ Study Guide#.