Study. uk . com
  1. Home
  2. All questions
  3. Question 75

CompTIA Security+ study material · question 75 of 611

Which measure reduces breach impact before any technical control is applied?

  1. Increasing the log retention period
  2. Not collecting the data in the first place
  3. Adding multi-factor authentication to the admin console
  4. Encrypting the database at rest
Show the answer

Answer: B. Not collecting the data in the first place

Data minimisation shrinks what a breach can disclose. Every other control protects data that still exists.

Source: NIST SP 800-63 Rev. 4 (NIST) — SP 800-63-4 › Privacy Requirements

Challenge yourself on this topic → Study as cards