Questão 74 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A company processes and stores sensitive data on its own systems. Which of the following steps should the company take first to ensure compliance with privacy regulations?
- A. Implement access controls and encryption.
- B. Develop and provide training on data protection policies.
- C. Create incident response and disaster recovery plans.
- D. Purchase and install security software.
Resposta correta:
A
Explicação
Explanation: Correct answer: A. Implement access controls and encryption. The first step to ensure compliance with privacy regulations is conducting a data inventory and classification because: Foundation:Organizations must understand what data they have, where it resides, and how it's used before G implementing privacy controls Regulatory Requirement:Privacy regulations require organizations to know what personal/sensitive data G they process and store Risk Assessment:Proper classification allows identification of high-risk data requiring enhanced protection G Control Prioritization:Once data is classified, appropriate security measures can be designed and G implemented Compliance Roadmap:The inventory forms the basis for all subsequent privacy compliance activities G Without understanding what sensitive data exists and where it's stored, an organization cannot effectively comply with privacy regulations or implement appropriate protective measures.
Quer todas as 907 questões por R$ 1,00?