nerdexam
(ISC)2

CCSP · Question #361

Which of the following would NOT be used to determine the classification of data? Response:

The correct answer is D. Future use. Future use of data is speculative and cannot reliably determine its current classification, which is based on present characteristics like sensitivity, creator, and existing metadata.

Submitted by khalil_dz· Apr 18, 2026Cloud Data Security

Question

Which of the following would NOT be used to determine the classification of data? Response:

Options

  • AMetadata
  • BPII
  • CCreator
  • DFuture use

How the community answered

(29 responses)
  • B
    7% (2)
  • C
    3% (1)
  • D
    90% (26)

Why each option

Future use of data is speculative and cannot reliably determine its current classification, which is based on present characteristics like sensitivity, creator, and existing metadata.

AMetadata

Metadata, such as creation date, owner, access permissions, and content tags, provides valuable context and can be used to categorize and classify data based on its attributes.

BPII

Personally Identifiable Information (PII) is a critical factor in data classification, as data containing PII typically requires a higher level of protection due to privacy regulations and potential impact of a breach.

CCreator

The creator of the data can often indicate its initial sensitivity, ownership, and intended purpose, which are all factors in determining its classification.

DFuture useCorrect

The future use of data is a speculative factor that cannot definitively determine its current classification, as classification is based on inherent characteristics, sensitivity, and regulatory requirements at the time of creation or processing. Data classification relies on attributes that exist now, not potential future applications.

Concept tested: Data Classification Factors

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-overview

Topics

#Data Classification#Data Security Principles#Information Governance

Community Discussion

No community discussion yet for this question.

Full CCSP Practice