nerdexam
GIAC

GCFA · Question #138

Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.

The correct answer is B. It helps identify which information is the most sensitive or vital to an organization. D. It helps identify which protections apply to which information. Information classification benefits an organization by identifying the sensitivity of data and mapping that sensitivity to appropriate protective controls.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.

Options

  • AIt ensures that modifications are not made to data by unauthorized personnel or processes.
  • BIt helps identify which information is the most sensitive or vital to an organization.
  • CIt helps reduce the Total Cost of Ownership (TCO).
  • DIt helps identify which protections apply to which information.

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    81% (38)
  • C
    15% (7)

Why each option

Information classification benefits an organization by identifying the sensitivity of data and mapping that sensitivity to appropriate protective controls.

AIt ensures that modifications are not made to data by unauthorized personnel or processes.

Preventing unauthorized modifications to data describes the integrity principle of the CIA triad, which is a separate security objective not uniquely achieved through information classification.

BIt helps identify which information is the most sensitive or vital to an organization.Correct

Identifying which information is most sensitive or vital allows an organization to prioritize security resources and apply controls proportional to the value and risk associated with each data asset.

CIt helps reduce the Total Cost of Ownership (TCO).

Reducing Total Cost of Ownership is a business efficiency goal not directly tied to information classification, which primarily addresses risk management and data governance.

DIt helps identify which protections apply to which information.Correct

Classification directly maps data categories to required protections, ensuring that controls such as encryption, access restrictions, and handling procedures are consistently applied to the correct information sets.

Concept tested: Benefits of information classification in security

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf

Topics

#information classification#data sensitivity#security policy#data protection

Community Discussion

No community discussion yet for this question.

Full GCFA Practice