CompTIA Data+ DA0-002 (V2) Practice Question

The correct answer is to first determine the data's classification level. Data classification is the process of categorizing data based on its sensitivity and is a foundational step in data governance and compliance. The classification level (e.g., Public, Internal, Confidential, Restricted) dictates the required security controls, handling procedures, access rights, and retention policies. Given the presence of personally identifiable information (PII) and financial data (which falls under regulations like PCI DSS), this dataset would be considered highly sensitive. Encrypting and anonymizing data are important security measures, but the decisions on when and how to apply them depend on the data's classification. Moving the data without understanding its handling requirements could lead to a compliance violation.