nerdexam
(ISC)2

CISSP · Question #1321

Which one of the following affects the classification of data?

The correct answer is D. Passage of time. Data classification is not static; the sensitivity and required protection level of data can change over time as circumstances, regulations, or business needs evolve.

Submitted by anna_se· Mar 5, 2026Asset Security

Question

Which one of the following affects the classification of data?

Options

  • AAssigned security label
  • BMultilevel Security (MLS) architecture
  • CMinimum query size
  • DPassage of time

How the community answered

(14 responses)
  • A
    7% (1)
  • D
    93% (13)

Why each option

Data classification is not static; the sensitivity and required protection level of data can change over time as circumstances, regulations, or business needs evolve.

AAssigned security label

An assigned security label is the result of a classification decision, not a factor that influences or changes the classification itself - it reflects the classification but does not affect it.

BMultilevel Security (MLS) architecture

Multilevel Security (MLS) architecture is a system design model that enforces existing classifications by controlling access across multiple sensitivity levels, but it does not determine or alter how data is classified.

CMinimum query size

Minimum query size is a database or aggregation-related concept used to prevent inference attacks, and has no bearing on the classification level assigned to a piece of data.

DPassage of timeCorrect

The passage of time directly affects data classification because information that was once highly sensitive (e.g., a merger plan, a product launch, or classified government intelligence) may become less sensitive or even public after a certain period. Classification policies often require periodic review and reclassification of data to ensure that protection levels remain appropriate, meaning time is a legitimate factor that triggers changes in classification status.

Concept tested: Factors that influence data classification decisions

Source: https://www.nist.gov/system/files/documents/2020/03/03/NIST%20SP%20800-60%20Vol.%201%20Rev.%201.pdf

Topics

#Data classification#Data lifecycle#Retention policies

Community Discussion

No community discussion yet for this question.

Full CISSP Practice