CISSP · Question #1432
Which of the following is the MOST appropriate control for asset data labeling procedures?
The correct answer is A. Logging data media to provide a physical inventory control. Asset data labeling procedures require physical inventory controls that track and identify media assets. Logging data media provides a direct mechanism to support labeling by maintaining a physical inventory record of each asset.
Question
Options
- ALogging data media to provide a physical inventory control
- BReviewing audit trails of logging records
- CCategorizing the types of media being used
- DReviewing off-site storage access controls
How the community answered
(26 responses)- A81% (21)
- B4% (1)
- C8% (2)
- D8% (2)
Why each option
Asset data labeling procedures require physical inventory controls that track and identify media assets. Logging data media provides a direct mechanism to support labeling by maintaining a physical inventory record of each asset.
Logging data media to provide a physical inventory control is the most appropriate control because asset data labeling procedures are fundamentally about identifying, tracking, and cataloging physical and logical assets. Maintaining a physical inventory log directly supports labeling by ensuring each media item is recorded, accounted for, and can be associated with its classification label. This aligns with information security asset management standards (e.g., ISO/IEC 27001 A.8) which require organizations to maintain an inventory of assets as a foundational control for data labeling.
Reviewing audit trails of logging records is a detective control focused on monitoring and accountability after the fact, not a procedural control for labeling assets at the point of classification.
Categorizing the types of media being used addresses media classification at a general level but does not constitute a labeling procedure control for individual asset identification and inventory tracking.
Reviewing off-site storage access controls is a physical security control related to storage facility access management, which is unrelated to the labeling and identification of data assets.
Concept tested: Asset data labeling and physical inventory control
Source: https://www.iso.org/standard/27001
Topics
Community Discussion
No community discussion yet for this question.