ISC2 CC Security Principles Practice Question
Which data classification level typically requires the highest level of protection?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Top secret
Top secret is the highest classification and requires strict controls.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Internal
Why it's wrong here
Internal data is restricted to employees but causes limited harm if disclosed, so it sits below confidential and restricted tiers. It is tempting because internal data still warrants access controls, yet those controls are lighter than those required for confidential information.
- ✗
Confidential
Why it's wrong here
Confidential sits below the top tier; classification schemes place the highest protection on data whose disclosure causes the gravest harm, typically labelled Restricted or Top Secret. Confidential suits internal-only business data where limited disclosure is tolerable.
- ✓
Top secret
Why this is correct
Top secret is the highest classification tier, so it mandates the strongest controls: strict need-to-know access, enhanced encryption, and rigorous handling procedures. Lower tiers such as confidential or internal permit weaker safeguards, so this level satisfies the stem's requirement for maximum protection.
- ✗
Public
Why it's wrong here
Public data is intended for open disclosure, so it carries the lowest protection requirements and no confidentiality obligations. It is tempting because public data still needs integrity and availability controls, but those are not the highest level of protection.
Go deeper
Related to this question
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.