Which of the following is the FIRST step in protecting data's confidentiality?

The correct answer is C. Identify which information is sensitive. Before any technical or administrative control can be applied, you must first know what needs to be protected. Identifying and classifying sensitive information is the foundational step in a data confidentiality program. Without knowing which data is sensitive, you cannot…

Submitted by haru.x· Apr 18, 2026Security Concepts and Practices

Question

Options

AInstall a firewall
BImplement encryption
CIdentify which information is sensitive
DReview all user access rights

How the community answered

(43 responses)

A
2% (1)
C
93% (40)
D
5% (2)

Explanation

Before any technical or administrative control can be applied, you must first know what needs to be protected. Identifying and classifying sensitive information is the foundational step in a data confidentiality program. Without knowing which data is sensitive, you cannot meaningfully install a firewall, implement encryption, or review access rights - those controls would lack direction and scope. This follows the principle that security controls must be driven by asset classification.

Topics

#Data Classification#Confidentiality#Security Fundamentals#Asset Identification

Community Discussion

No community discussion yet for this question.

Full SSCP Practice