Registration Task 5 identifies the system security requirements. Which of the following elements of Registration Task 5 defines the type of data processed by the system?

Question

Options

• AData security requirement
• BNetwork connection rule
• CApplicable instruction or directive
• DSecurity concept of operation

• A
  91% (30)
• B
  6% (2)
• C
  3% (1)

Explanation

Data security requirement (Option A) is correct because this element of Registration Task 5 explicitly captures the classification, sensitivity, and category of data the system processes - for example, whether it handles classified information, PII, or controlled unclassified information. It's the only element directly tied to characterizing the data itself.

Option B (Network connection rule) is wrong because it governs how the system connects to networks - addressing connectivity and interface requirements, not the nature of the data being processed.

Option C (Applicable instruction or directive) is wrong because it identifies the governing policies, regulations, or DoD directives that apply to the system - it's about legal/policy authority, not data classification.

Option D (Security concept of operation) is wrong because it describes how security will be implemented and managed operationally - a narrative of security posture, not a definition of data type.

Memory tip: Link "Data security requirement" → "Data description." If the question asks what defines the data, the answer must contain the word Data - only Option A does.

No community discussion yet for this question.