CCP Endpoint Security & Data Protection Flashcards
6 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CCP Endpoint Security & Data Protection flashcards as text
What is the primary goal of data classification within an organization?
Answer: To assign protection levels to data based on its sensitivity
Data classification assigns sensitivity labels so that appropriate security controls can be applied to protect data according to its value and risk.
Which technique replaces sensitive data with a non-sensitive token that has no exploitable value?
Answer: Tokenization
Tokenization substitutes sensitive values such as credit card numbers with tokens that are meaningless outside the tokenization system.
What is the purpose of application whitelisting on endpoints?
Answer: To allow only explicitly pre-approved applications to execute
Application whitelisting permits only authorized applications to run, blocking all unauthorized executables including malware by default.
Which standard mandates security controls for systems that process, store, or transmit payment card data?
Answer: PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) requires organizations that handle payment card data to implement specific security controls.
What is the primary function of a Mobile Device Management (MDM) solution?
Answer: To centrally manage and enforce security policies on mobile devices
MDM solutions allow IT administrators to remotely manage configurations, enforce policies, and wipe or lock mobile devices as needed.
Data masking is most commonly used to protect sensitive data when:
Answer: Used in non-production environments such as development and testing
Data masking replaces real sensitive data with realistic but fictitious values, protecting actual data while allowing testing with representative data.