How would you answer an interview scenario involving data protection and classification in Cloud Security?

For an interview scenario involving data protection and classification, I would first clarify the business goal, scale, constraints, and the failure or quality attribute the interviewer wants to explore. Data protection identifies sensitive information and applies storage, encryption, access, retention, masking, and monitoring controls based on classification. For production, classify data, minimize collection, control access, encrypt, tokenize or mask where needed, define retention, and audit sensitive operations. I would then explain the main alternatives and tradeoffs, identify likely failure modes, and describe how I would validate the solution through testing, observability, security controls, and recovery or rollback planning.