Privacy Security Cybersecurity

Big Idea 5: Impact of Computing
Day 12 Practice - AP CSP Daily Question
[FOCUS] Privacy, Security, and Cybersecurity

Practice Question

A company stores customer data including names, email addresses, and purchase history. A malicious actor gains unauthorized access to this database.
Which of the following security measures would have been MOST effective at protecting the sensitive data even after the breach occurred?
What This Tests: Big Idea 5 covers cybersecurity concepts including how encryption protects data even when other security measures fail.

Why B is Correct

The key phrase is "even after the breach occurred." Once an attacker has accessed the database, the question becomes: what protects the data itself?

Encryption transforms readable data into an unreadable format using a key. Even if attackers steal encrypted data, they cannot read it without the decryption key.

The other options are preventive measures that might stop a breach from happening, but they do not protect data after a breach has occurred:

  • Password policies - prevent unauthorized access but do not protect data once accessed
  • Firewalls - monitor and block suspicious traffic but cannot protect data already stolen
  • Phishing training - prevents social engineering attacks but does not protect stored data

Common Mistakes

Mistake: Confusing prevention vs. protection

Many security measures prevent breaches. Encryption is unique because it protects data even after a breach. This is called "defense in depth" - having multiple layers of security.

[TIP] AP Exam Strategy

Read questions carefully for timing words like "after" or "even if." These signal that you need to identify which measure provides protection at a specific point in an attack timeline.

Need Extra Help with AP CSP?

Get personalized tutoring from an experienced AP Computer Science teacher.

Book a Session More Practice
Back to blog

Leave a comment

Please note, comments need to be approved before they are published.