nerdexam
GIAC

GSLC · Question #205

Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.

The correct answer is A. It helps identify which information is the most sensitive or vital to an organization. D. It helps identify which protections apply to which information. Information classification helps organizations identify data sensitivity levels and determine which security controls apply to each category of information.

Security Program Management & Governance

Question

Which of the following are the benefits of information classification for an organization? Each correct answer represents a complete solution. Choose two.

Options

  • AIt helps identify which information is the most sensitive or vital to an organization.
  • BIt ensures that modifications are not made to data by unauthorized personnel or processes.
  • CIt helps reduce the Total Cost of Ownership (TCO).
  • DIt helps identify which protections apply to which information.

How the community answered

(19 responses)
  • A
    89% (17)
  • B
    5% (1)
  • C
    5% (1)

Why each option

Information classification helps organizations identify data sensitivity levels and determine which security controls apply to each category of information.

AIt helps identify which information is the most sensitive or vital to an organization.Correct

A primary goal of information classification is to categorize data by its sensitivity or criticality to the organization, enabling decision-makers to prioritize security investments where they matter most. Without this identification step, organizations cannot distinguish between data that requires strict controls and data that can be handled with minimal overhead.

BIt ensures that modifications are not made to data by unauthorized personnel or processes.

Preventing unauthorized modifications is a goal of data integrity and access control mechanisms - not a benefit derived from classification itself.

CIt helps reduce the Total Cost of Ownership (TCO).

Information classification typically introduces implementation and maintenance costs; it does not directly reduce the Total Cost of Ownership.

DIt helps identify which protections apply to which information.Correct

Classification schemes directly map each data category to a corresponding set of protective controls, ensuring that policies, access restrictions, and handling procedures are consistently applied based on the data's assigned classification level.

Concept tested: Benefits of information classification in security programs

Source: https://csrc.nist.gov/publications/detail/sp/800-60/vol-1-rev-1/final

Topics

#information classification#data sensitivity#data protection#security governance

Community Discussion

No community discussion yet for this question.

Full GSLC Practice