nerdexam
(ISC)2

CGRC · Question #12

Sensitivity of a system based on the _________ processed, stored, and transmitted by the system. Response:

The correct answer is A. Data. The sensitivity of an information system is primarily determined by the classification, criticality, and impact level of the data it processes, stores, and transmits. This data can range from public to highly classified information.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Sensitivity of a system based on the _________ processed, stored, and transmitted by the system. Response:

Options

  • AData
  • BProgram
  • CImage
  • DSignal

How the community answered

(53 responses)
  • A
    89% (47)
  • B
    2% (1)
  • C
    4% (2)
  • D
    6% (3)

Why each option

The sensitivity of an information system is primarily determined by the classification, criticality, and impact level of the data it processes, stores, and transmits. This data can range from public to highly classified information.

ADataCorrect

The sensitivity or impact level of an information system is directly derived from the classification and criticality of the data it processes, stores, and transmits. Protecting this data from unauthorized access, modification, or destruction is the primary goal of system security.

BProgram

While programs interact with data, the programs themselves are generally not the primary factor determining system sensitivity in the same way the data's inherent value or classification is.

CImage

An image is a specific type of data, but 'data' is a broader and more accurate term encompassing all forms of information that determine system sensitivity.

DSignal

A signal is a means of data transmission, but the sensitivity is based on the content of the data being signaled, not the signal itself.

Concept tested: System Sensitivity Factors

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-60v2r1.pdf

Topics

#System Sensitivity#Data Classification#Risk Assessment#Information Security Fundamentals

Community Discussion

No community discussion yet for this question.

Full CGRC Practice