nerdexam
CompTIA

CAS-005 · Question #522

After a leak of important documents, a company decides to implement a data protection program to avoid similar incidents in the future. Which of the following should the company do first?

The correct answer is D. Develop data labeling standards. Developing data labeling standards is the first step in a data protection program. It ensures that data is classified according to sensitivity, which then informs the appropriate encryption, storage hardening, and DLP policies to apply.

Submitted by haruto_sh· Mar 6, 2026Governance, Risk, and Compliance

Question

After a leak of important documents, a company decides to implement a data protection program to avoid similar incidents in the future. Which of the following should the company do first?

Options

  • AImplement data encryption.
  • BPerform data storage hardening.
  • CDeploy a data loss prevention policy.
  • DDevelop data labeling standards.

How the community answered

(46 responses)
  • A
    13% (6)
  • B
    9% (4)
  • C
    2% (1)
  • D
    76% (35)

Explanation

Developing data labeling standards is the first step in a data protection program. It ensures that data is classified according to sensitivity, which then informs the appropriate encryption, storage hardening, and DLP policies to apply.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice