DRAG DROP
You are editing a SQL Server Integration Services (SSIS) package that contains a task with
a sensitive property.
You need to create a project parameter and configure it so that its value is encrypted when it
is deployed to the SSIS catalog.
Which three steps should you perform in sequence? (To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.)
Answer: 
The scope shoud be Project as the question required.
Maybe intent of the question was, as it is stated in 1st sentence, to enable sensitive information to be encrypted whenever the package is run, assuming the package can be used by mulitiple projects. Make any sense? 🙂
Koala is right, correct answer is:
1) Right click on the task and choose Parameterize
2) Select the property… set the scope to Project
3) Edit the parameter and set the Sensitive property to True
I am with Koala at this
Richt-click the task and choose Parameterize
Select the property to be parameterized and … to project
Edit the parameter and set the Sensitive property to True
I am also thinking the scope must be set to Project instead of package.