Question

A financial services firm has completed a data discovery scan across its cloud environment and produced a classification catalog tagging datasets as Public, Internal, Confidential, and Restricted. The security architect now wants to ensure that the classification effort produces measurable security value rather than remaining a compliance artifact. Which action best leverages the completed classification to strengthen data protection?

Accepted Answer

Automatically apply differentiated controls—such as stronger encryption and stricter access policies for Restricted data—based on the assigned classification labels

Answer

Re-run the discovery scan monthly to confirm that the total count of classified records continues to increase over time

Answer

Encrypt every dataset with a single organization-wide key regardless of its classification to simplify key management

Answer

Archive all classified datasets to cold storage immediately to reduce the attack surface of the production environment