Courseiva
hardMultiple SelectObjective-mapped

CCSP Practice Question: Which THREE of the following are essential steps…

Which THREE of the following are essential steps in a cloud data discovery process?

⚠ Common exam trap

ISC2 often tests the distinction between discovery steps and subsequent security controls, so the trap here is that candidates mistakenly treat encryption or backup as part of the discovery process when they are actually post-discovery remediation or protection actions.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Map data flows between systems

Mapping data flows between systems is a foundational step in cloud data discovery. It enables organizations to understand how data moves across cloud services, APIs, and storage tiers, which is critical for identifying where sensitive data may be transmitted or stored. Without this mapping, discovery efforts may miss data in transit or in transient storage, leading to incomplete visibility.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Map data flows between systems

    Why this is correct

    Understanding data movement is critical.

  • Encrypt all discovered data

    Why it's wrong here

    Encryption is a subsequent action, not part of discovery.

  • Classify data based on sensitivity

    Why this is correct

    Classification helps prioritize protection.

  • Identify where sensitive data resides

    Why this is correct

    First step is to locate data.

  • Create backup copies of data

    Why it's wrong here

    Backups are not part of discovery.

About these practice questions

One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.