CCSP Cloud Data Security Practice Question
An organization wants to classify data in the cloud and assign labels such as 'Public', 'Internal', 'Confidential', and 'Restricted'. What is the primary purpose of this classification scheme?
⚠ Common exam trap
CCSP often tests the misconception that classification is about cost, sharing, or residency — the trap is missing that its primary purpose is to drive proportionate security controls based on sensitivity.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To apply appropriate security controls based on sensitivity
Data classification assigns sensitivity labels so that security controls — encryption, access control, retention, DLP, and monitoring — can be applied proportionally to the data's value and risk. Labeling data as Public, Internal, Confidential, or Restricted lets the organization map each tier to a defined control baseline, ensuring the most sensitive data receives the strongest protection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To reduce cloud storage costs by moving data to cheaper tiers
Why it's wrong here
Classification labels drive handling, access and protection decisions; they do not relocate objects between storage tiers, which lifecycle rules handle. It is tempting because tiering does cut cost, and classification would be the right driver where retention or access-frequency policies feed lifecycle management.
- ✗
To enable public sharing of data
Why it's wrong here
Classification exists to drive handling, access and protection decisions according to sensitivity; enabling public sharing would invert that purpose by exposing the most sensitive labels. It is tempting because the 'Public' label does permit sharing, but that is one outcome of a tier, not the scheme's primary purpose.
- ✗
To comply with data localization laws
Why it's wrong here
Data localisation concerns where data is stored and processed geographically, which labels such as Confidential do not themselves enforce; residency is governed by region selection and policy. It is tempting because classification often feeds compliance controls, and would be correct if the labels mapped to permitted storage regions.
- ✓
To apply appropriate security controls based on sensitivity
Why this is correct
Labels drive protection: sensitivity tiers determine which encryption, access and handling controls apply. Classification exists precisely so that 'Restricted' data receives stricter safeguards than 'Public', satisfying the stem's requirement to classify data and assign labels. Microsoft Entra ID and similar tools then enforce those label-based controls.
Go deeper
Related to this question
About these practice questions
This CCSP question is part of Courseiva's 934-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.