nerdexam
(ISC)2

CCSP · Question #71

Data labels could include all the following, except:

The correct answer is D. Multifactor authentication. Data labels describe data characteristics for handling and protection, but multifactor authentication is a control, not a label itself.

Submitted by diego_uy· Apr 18, 2026Cloud Data Security

Question

Data labels could include all the following, except:

Options

  • AConfidentiality level
  • BDistribution limitations
  • CAccess restrictions
  • DMultifactor authentication

How the community answered

(36 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    3% (1)
  • D
    89% (32)

Why each option

Data labels describe data characteristics for handling and protection, but multifactor authentication is a control, not a label itself.

AConfidentiality level

Confidentiality level is a common data label indicating the sensitivity and required protection for information.

BDistribution limitations

Distribution limitations specify who can receive or share the data, which is a type of data label.

CAccess restrictions

Access restrictions dictate who can access the data and under what conditions, serving as a data label component.

DMultifactor authenticationCorrect

Multifactor authentication (MFA) is a security control used to verify identity during access attempts, rather than a descriptive label applied to data itself to indicate its characteristics or handling requirements.

Concept tested: Data labeling vs. security controls

Topics

#Data classification#Data labeling#Data security controls#Access control

Community Discussion

No community discussion yet for this question.

Full CCSP Practice