easyMultiple SelectObjective-mapped
SSCP Practice Question: Which THREE of the following are data loss…
Which THREE of the following are data loss prevention (DLP) controls that can be implemented to protect sensitive data?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Encrypt sensitive data both at rest and in transit
The correct answers are B, C, and D. Encrypting sensitive data at rest and in transit (B) directly prevents unauthorized disclosure. Deploying endpoint DLP agents (C) monitors and blocks unauthorized data transfers. Classifying data based on sensitivity and applying appropriate labels (D) enables targeted protection. Option A (strong passwords) is an authentication control, not a DLP control. Option E (network firewalls) controls traffic but does not inspect content for data loss prevention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Require strong passwords for all user accounts
Why it's wrong here
Passwords protect access, not data leakage.
- ✓
Encrypt sensitive data both at rest and in transit
Why this is correct
Encryption renders data unreadable if leaked.
- ✓
Deploy endpoint DLP agents to monitor and block unauthorized data transfers
Why this is correct
Agents can prevent copying to USB or email.
- ✓
Classify data based on sensitivity and apply appropriate labels
Why this is correct
Labels help enforce policies on handling.
- ✗
Implement network firewalls to block all outbound traffic
Why it's wrong here
Firewalls block traffic but do not prevent authorized users from copying data.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.