nerdexam
(ISC)2

CCSP · Question #70

The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and…

The correct answer is A. Extensive user training on proper data handling techniques. Extensive user training on proper data handling techniques is a key method to reduce sensitive data exposure by addressing human error and promoting secure data practices.

Submitted by yasin.bd· Apr 18, 2026Cloud Application Security

Question

The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months. The 2013 OWASP Top Ten list includes "sensitive data exposure." Which of these is a technique to reduce the potential for a sensitive data exposure?

Options

  • AExtensive user training on proper data handling techniques
  • BAdvanced firewalls inspecting all inbound traffic, to include content-based screening
  • CEnsuring the use of utility backup power supplies
  • DRoving security guards

How the community answered

(22 responses)
  • A
    91% (20)
  • C
    5% (1)
  • D
    5% (1)

Why each option

Extensive user training on proper data handling techniques is a key method to reduce sensitive data exposure by addressing human error and promoting secure data practices.

AExtensive user training on proper data handling techniquesCorrect

Sensitive data exposure often results from human errors such as improper data storage, unencrypted transmission, or accidental sharing. Comprehensive user training on proper data handling techniques educates employees about data classification, encryption best practices, secure communication channels, and recognizing social engineering, significantly reducing the likelihood of inadvertent data exposure.

BAdvanced firewalls inspecting all inbound traffic, to include content-based screening

Advanced firewalls inspecting inbound traffic protect against external attacks but do not directly prevent sensitive data exposure caused by internal mishandling or misconfiguration.

CEnsuring the use of utility backup power supplies

Ensuring the use of utility backup power supplies addresses business continuity and availability during power outages, not sensitive data exposure.

DRoving security guards

Roving security guards provide physical security and do not directly address the digital risks of sensitive data exposure in web applications or through user error.

Concept tested: OWASP Top 10 A6:2013, data exposure mitigation

Source: https://owasp.org/www-project-top-ten/2013/A6-Sensitive_Data_Exposure

Topics

#OWASP Top Ten#Sensitive Data Exposure#User Training#Application Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CCSP Practice