nerdexam
Isaca

CISA · Question #129

Which of the following is the GREATEST benefit of an effective data classification process?

The correct answer is B. Data is protected according to its sensitivity. The greatest benefit of an effective data classification process is ensuring that data receives protection commensurate with its sensitivity level, optimizing security resource allocation.

Submitted by yuki_2020· Apr 18, 2026Protection of Information Assets

Question

Which of the following is the GREATEST benefit of an effective data classification process?

Options

  • AData retention periods are well defined.
  • BData is protected according to its sensitivity.
  • CData custodians are identified.
  • DAppropriate ownership over data is assigned.

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    95% (37)
  • C
    3% (1)

Why each option

The greatest benefit of an effective data classification process is ensuring that data receives protection commensurate with its sensitivity level, optimizing security resource allocation.

AData retention periods are well defined.

While data classification can inform data retention policies, its primary benefit is not defining retention periods, but rather guiding security controls.

BData is protected according to its sensitivity.Correct

Data classification categorizes information based on its sensitivity, value, and criticality, which directly enables organizations to apply appropriate security controls and protection mechanisms. By understanding the sensitivity of data, resources can be allocated effectively to protect high-value, sensitive data more rigorously, while less sensitive data receives adequate but not excessive protection, aligning security efforts with risk.

CData custodians are identified.

Identification of data custodians is important, but it is often a prerequisite for or a consequence of, rather than the primary benefit of, data classification itself.

DAppropriate ownership over data is assigned.

Assigning appropriate ownership is a crucial governance step often facilitated by classification, but the core benefit of classification is enabling tailored protection, not just ownership assignment.

Concept tested: Benefits of data classification

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/information-protection?view=o365-worldwide

Topics

#Data Classification#Data Protection#Information Sensitivity#Security Controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice