CISSP · Question #1321
Which one of the following affects the classification of data?
The correct answer is D. Passage of time. Data classification is not static; the sensitivity and required protection level of data can change over time as circumstances, regulations, or business needs evolve.
Question
Options
- AAssigned security label
- BMultilevel Security (MLS) architecture
- CMinimum query size
- DPassage of time
How the community answered
(14 responses)- A7% (1)
- D93% (13)
Why each option
Data classification is not static; the sensitivity and required protection level of data can change over time as circumstances, regulations, or business needs evolve.
An assigned security label is the result of a classification decision, not a factor that influences or changes the classification itself - it reflects the classification but does not affect it.
Multilevel Security (MLS) architecture is a system design model that enforces existing classifications by controlling access across multiple sensitivity levels, but it does not determine or alter how data is classified.
Minimum query size is a database or aggregation-related concept used to prevent inference attacks, and has no bearing on the classification level assigned to a piece of data.
The passage of time directly affects data classification because information that was once highly sensitive (e.g., a merger plan, a product launch, or classified government intelligence) may become less sensitive or even public after a certain period. Classification policies often require periodic review and reclassification of data to ensure that protection levels remain appropriate, meaning time is a legitimate factor that triggers changes in classification status.
Concept tested: Factors that influence data classification decisions
Source: https://www.nist.gov/system/files/documents/2020/03/03/NIST%20SP%20800-60%20Vol.%201%20Rev.%201.pdf
Topics
Community Discussion
No community discussion yet for this question.