Which two data security controls are commonly used to protect business data?

Which two data security controls are commonly used to protect business data?

• A. Firewalls and antivirus software
• B. Physical security and CCTV
• C. Access controls and encryption
• D. Data visualization and dashboards

Answer: (C)

Controlling access to data and keeping the data unreadable without the right keys are the primary ways to protect business data. Access controls limit who can view, modify, or delete data, implementing authentication and authorization so that only authorized users can perform specific actions. Encryption protects the data itself by transforming it into unreadable ciphertext, so even if data is exposed or stolen, it remains unusable without the correct decryption key. Together, they address both who can access data and how visible the data remains, strengthening confidentiality and integrity. Other options don’t directly secure the data content in the same fundamental way. Firewalls and antivirus software protect devices and networks from threats but aren’t direct data protection controls. Physical security and CCTV focus on restricting physical access to hardware rather than governing data access or protecting data itself. Data visualization and dashboards are about presenting data and do not provide security protections.

Controlling access to data and keeping the data unreadable without the right keys are the primary ways to protect business data. Access controls limit who can view, modify, or delete data, implementing authentication and authorization so that only authorized users can perform specific actions. Encryption protects the data itself by transforming it into unreadable ciphertext, so even if data is exposed or stolen, it remains unusable without the correct decryption key. Together, they address both who can access data and how visible the data remains, strengthening confidentiality and integrity.

Other options don’t directly secure the data content in the same fundamental way. Firewalls and antivirus software protect devices and networks from threats but aren’t direct data protection controls. Physical security and CCTV focus on restricting physical access to hardware rather than governing data access or protecting data itself. Data visualization and dashboards are about presenting data and do not provide security protections.