The correct selections are Rule-Based Automation, Incident Management, Webhook Notification System, and Workflow Configuration Tool . Forcepoint DSPM Controls Orchestration is built around rules that identify data requiring attention and can trigger notifications or automated responses. The official documentation describes Controls Orchestration as providing “automated work flows, rule-based detection, timely notifications, and efficient incident management,” which directly maps to these four options.

Rule-Based Automation is represented by custom rules that evaluate datasets such as files, trustees, or agent activities using GQL conditions. Workflow Configuration Tool is reflected in the rule-building process under Policy Center > Controls Orchestration , where administrators create rules, define ownership, select the asset, configure conditions, and enable the rule.

Webhook Notification System is valid because orchestration rules can send notifications outside Forcepoint DSPM, and webhook functionality sends HTTP requests to a configured callback endpoint when a defined condition is met. Incident Management is also core because each rule is automatically added as a card in the Incidents tab, linking detected conditions to operational review and response. Rule-Based Remediation is not the best answer here because remediation is an outcome of automated response workflows, not the named key feature in this option set. References/topics: Controls Orchestration, GQL Rules, Webhooks, Incidents, Policy Center .