nerdexam
(ISC)2

CISSP · Question #1432

Which of the following is the MOST appropriate control for asset data labeling procedures?

The correct answer is A. Logging data media to provide a physical inventory control. Asset data labeling procedures require physical inventory controls that track and identify media assets. Logging data media provides a direct mechanism to support labeling by maintaining a physical inventory record of each asset.

Submitted by haru.x· Mar 5, 2026Asset Security

Question

Which of the following is the MOST appropriate control for asset data labeling procedures?

Options

  • ALogging data media to provide a physical inventory control
  • BReviewing audit trails of logging records
  • CCategorizing the types of media being used
  • DReviewing off-site storage access controls

How the community answered

(26 responses)
  • A
    81% (21)
  • B
    4% (1)
  • C
    8% (2)
  • D
    8% (2)

Why each option

Asset data labeling procedures require physical inventory controls that track and identify media assets. Logging data media provides a direct mechanism to support labeling by maintaining a physical inventory record of each asset.

ALogging data media to provide a physical inventory controlCorrect

Logging data media to provide a physical inventory control is the most appropriate control because asset data labeling procedures are fundamentally about identifying, tracking, and cataloging physical and logical assets. Maintaining a physical inventory log directly supports labeling by ensuring each media item is recorded, accounted for, and can be associated with its classification label. This aligns with information security asset management standards (e.g., ISO/IEC 27001 A.8) which require organizations to maintain an inventory of assets as a foundational control for data labeling.

BReviewing audit trails of logging records

Reviewing audit trails of logging records is a detective control focused on monitoring and accountability after the fact, not a procedural control for labeling assets at the point of classification.

CCategorizing the types of media being used

Categorizing the types of media being used addresses media classification at a general level but does not constitute a labeling procedure control for individual asset identification and inventory tracking.

DReviewing off-site storage access controls

Reviewing off-site storage access controls is a physical security control related to storage facility access management, which is unrelated to the labeling and identification of data assets.

Concept tested: Asset data labeling and physical inventory control

Source: https://www.iso.org/standard/27001

Topics

#asset labeling#data classification#physical inventory

Community Discussion

No community discussion yet for this question.

Full CISSP Practice