easyMultiple SelectObjective-mapped
CCSP Practice Question: Which TWO of the following are valid data states…
Which TWO of the following are valid data states that must be protected in cloud computing?
⚠ Common exam trap
ISC2 often tests the distinction between security controls (like encryption or integrity) and the actual data states that must be protected, causing candidates to confuse a protection mechanism with a state classification.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data at rest
In cloud computing, data exists in three primary states: at rest (stored on disk or in memory), in transit (moving across networks), and in use (being processed). The CCSP exam specifically identifies 'data at rest' and 'data in transit' as the two fundamental data states that require protection through encryption, access controls, and integrity mechanisms. Option B is correct because data at rest refers to inactive data stored physically on any digital device, such as databases, backups, or archives, and must be safeguarded against unauthorized access or theft.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data encryption
Why it's wrong here
Encryption is a protection measure, not a state.
- ✓
Data at rest
Why this is correct
Data at rest is a standard state requiring protection.
- ✓
Data in transit
Why this is correct
Data in transit is a standard state requiring protection.
- ✗
Data integrity
Why it's wrong here
Integrity is a security goal, not a state.
- ✗
Data in database
Why it's wrong here
Data in database is a subset of data at rest.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.