CISSP Question #1321: Real Exam Question with Answer & Explanation

Question

Which one of the following affects the classification of data?

Options

• AAssigned security label
• BMultilevel Security (MLS) architecture
• CMinimum query size
• DPassage of time

Explanation

Data classification is not static; the sensitivity and required protection level of data can change over time as circumstances, regulations, or business needs evolve.

Common mistakes.

• A. An assigned security label is the result of a classification decision, not a factor that influences or changes the classification itself - it reflects the classification but does not affect it.
• B. Multilevel Security (MLS) architecture is a system design model that enforces existing classifications by controlling access across multiple sensitivity levels, but it does not determine or alter how data is classified.
• C. Minimum query size is a database or aggregation-related concept used to prevent inference attacks, and has no bearing on the classification level assigned to a piece of data.

Concept tested. Factors that influence data classification decisions

Reference. https://www.nist.gov/system/files/documents/2020/03/03/NIST%20SP%20800-60%20Vol.%201%20Rev.%201.pdf

No community discussion yet for this question.