CISSP Question #732: Real Exam Question with Answer & Explanation

Question

What is the ultimate objective of information classification?

Options

• ATo assign responsibility for mitigating the risk to vulnerable systems
• BTo ensure that information assets receive an appropriate level of protection
• CTo recognize that the value of any item of information may change over time
• DTo recognize the optimal number of classification categories and the benefits to be gained from

Explanation

The ultimate objective of information classification is to ensure that information assets receive an appropriate level of protection in accordance with their importance and sensitivity to the organization. Information classification is the process of assigning labels or categories to information based on criteria such as confidentiality, integrity, availability, and value. Information classification helps the organization to identify the risks and threats to the information, and to apply the necessary controls and safeguards to protect it. Information classification also helps the organization to comply with the legal, regulatory, and contractual obligations related to the

No community discussion yet for this question.