nerdexam
(ISC)2

CGRC · Question #412

Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality? Response:

The correct answer is D. Data Classification. Data classification is the process of categorizing information based on its sensitivity, secrecy, or confidentiality to ensure appropriate security controls are applied.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following processes is used to protect the data based on its secrecy, sensitivity, or confidentiality? Response:

Options

  • AChange Control
  • BData Hiding
  • CConfiguration Management
  • DData Classification

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    7% (2)
  • C
    4% (1)
  • D
    85% (23)

Why each option

Data classification is the process of categorizing information based on its sensitivity, secrecy, or confidentiality to ensure appropriate security controls are applied.

AChange Control

Change Control is a process for managing modifications to system components, processes, or configurations, not for categorizing data sensitivity.

BData Hiding

Data Hiding is a concept related to information security where data is made inaccessible or invisible to unauthorized parties, but it is not the process of defining data sensitivity categories.

CConfiguration Management

Configuration Management is the process of establishing and maintaining consistency of a product's performance, functional, and physical attributes with its requirements, design, and operational information throughout its life.

DData ClassificationCorrect

Data classification involves systematically organizing data into categories (e.g., public, internal, confidential, top secret) based on its sensitivity, value, and the potential impact of its unauthorized disclosure. This process helps determine the level of protection required, such as encryption, access controls, and retention policies, aligning security measures with data's confidentiality needs.

Concept tested: Data classification and protection

Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/information-protection-data-classification?view=o365-worldwide

Topics

#Data Classification#Data Protection#Confidentiality#Data Sensitivity

Community Discussion

No community discussion yet for this question.

Full CGRC Practice