CGRC · Question #412
Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality? Response:
The correct answer is D. Data Classification. Data classification is the process of categorizing information based on its sensitivity, secrecy, or confidentiality to ensure appropriate security controls are applied.
Question
Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality? Response:
Options
- AChange Control
- BData Hiding
- CConfiguration Management
- DData Classification
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C4% (1)
- D85% (23)
Why each option
Data classification is the process of categorizing information based on its sensitivity, secrecy, or confidentiality to ensure appropriate security controls are applied.
Change Control is a process for managing modifications to system components, processes, or configurations, not for categorizing data sensitivity.
Data Hiding is a concept related to information security where data is made inaccessible or invisible to unauthorized parties, but it is not the process of defining data sensitivity categories.
Configuration Management is the process of establishing and maintaining consistency of a product's performance, functional, and physical attributes with its requirements, design, and operational information throughout its life.
Data classification involves systematically organizing data into categories (e.g., public, internal, confidential, top secret) based on its sensitivity, value, and the potential impact of its unauthorized disclosure. This process helps determine the level of protection required, such as encryption, access controls, and retention policies, aligning security measures with data's confidentiality needs.
Concept tested: Data classification and protection
Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection-data-classification?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.