GCED · Question #95
A legacy server on the network was breached through an OS vulnerability with no patch available. The server is used only rarely by employees across several business units. The theft of information…
The correct answer is C. Data classification. The legacy system was not properly classified or assigned an owner. It is critical that an organization identifies and classifies information so proper controls and measures should be put in place. The ultimate goal of data classification is to make sure that all information is…
Question
A legacy server on the network was breached through an OS vulnerability with no patch available. The server is used only rarely by employees across several business units. The theft of information from the server goes unnoticed until the company is notified by a third party that sensitive information has been posted on the Internet. Which control was the first to fail?
Options
- ASecurity awareness
- BAccess control
- CData classification
- DIncident response
How the community answered
(25 responses)- A4% (1)
- B12% (3)
- C64% (16)
- D20% (5)
Explanation
The legacy system was not properly classified or assigned an owner. It is critical that an organization identifies and classifies information so proper controls and measures should be put in place. The ultimate goal of data classification is to make sure that all information is properly protected at the correct level. This was not a failure of incident response, access control or security awareness training.
Topics
Community Discussion
No community discussion yet for this question.