Exam CISSP topic 1 question 230 discussion

Stop collecing information you don't need.... is the best way to keep that info secure.

In the official study guide 9th in a 'Law' chapter the 20 questions at the end also had a similar question. There the answer was also collection limitation because what you dont collect cannot be lost. That question was about a webshop. By limiting the collection of sensitive customer information, the organization can reduce the attack surface and minimize the potential for data breaches. This is an important consideration for organizations that handle sensitive customer information, as it can help to protect their customers' privacy and reduce the risk of data breaches.

OSGv9 - One of the easiest ways to prevent the loss of data is to simply not collect it.

Data masking: Involves obscuring specific data within a database, but it doesn't necessarily reduce the overall attack surface. It focuses on protecting the confidentiality of data within the database. Authentication: Ensures that only authorized users can access systems or information. While crucial for security, it doesn't directly minimize the attack surface; it controls who has access. Obfuscation: Involves making data unclear or difficult to understand, but it doesn't necessarily reduce the attack surface. It aims more at hiding the true nature of data. Collection limitation: Involves limiting the amount and type of data collected to only what is necessary for a specific purpose. This directly reduces the attack surface by minimizing the amount of potentially sensitive information that an attacker could target.

Collection limitation means that only the necessary and relevant information should be collected from the customer, and nothing more. By limiting the amount of data collected, there is less data that can potentially be compromised in the event of a security breach. Data masking, authentication, and obfuscation are also important security measures, but they do not address the issue of limiting the amount of data collected.

Agree with B

Minimizing attack surface means that users are restricted from accessing certain areas to reduce entry points for unauthorized users. This means b. Authentication