CISSP Question #1432: Real Exam Question with Answer & Explanation

Question

Which of the following is the MOST appropriate control for asset data labeling procedures?

Options

• ALogging data media to provide a physical inventory control
• BReviewing audit trails of logging records
• CCategorizing the types of media being used
• DReviewing off-site storage access controls

Explanation

Asset data labeling procedures require physical inventory controls that track and identify media assets. Logging data media provides a direct mechanism to support labeling by maintaining a physical inventory record of each asset.

Common mistakes.

• B. Reviewing audit trails of logging records is a detective control focused on monitoring and accountability after the fact, not a procedural control for labeling assets at the point of classification.
• C. Categorizing the types of media being used addresses media classification at a general level but does not constitute a labeling procedure control for individual asset identification and inventory tracking.
• D. Reviewing off-site storage access controls is a physical security control related to storage facility access management, which is unrelated to the labeling and identification of data assets.

Concept tested. Asset data labeling and physical inventory control

Reference. https://www.iso.org/standard/27001

No community discussion yet for this question.