NSF Specialist Training And Security Fundamentals Practice Test

Data classification determines how tightly you must protect information based on sensitivity. The higher the sensitivity, the more stringent the handling and access controls. Restricted data sits at the top of that scale, so it requires the strongest protections: access only for those with a strict need to know, least-privilege access, strong authentication, encryption, comprehensive logging and monitoring, strict sharing rules, and careful handling from creation through disposal. Public data is meant for broad distribution and carries minimal controls, while Internal data requires more protection than public but less than restricted. Confidential data sits in between, needing controlled access but not the same level of rigor as restricted. Because restricted data demands the most stringent controls due to the higher risk of disclosure, it is the best answer.