SSCP · Question #1316
Which of the following criteria is used to determine the proper classification of a data object? (Choose three)
The correct answer is A. Sensitivity B. Value E. Age. Data classification is determined by several factors, including the data's sensitivity (potential impact of compromise), its value to the organization, and its age, which can affect its relevance and retention requirements. These criteria help establish appropriate security…
Question
Which of the following criteria is used to determine the proper classification of a data object? (Choose three)
Options
- ASensitivity
- BValue
- CUseful life
- DStorage cost
- EAge
How the community answered
(47 responses)- A94% (44)
- C4% (2)
- D2% (1)
Why each option
Data classification is determined by several factors, including the data's sensitivity (potential impact of compromise), its value to the organization, and its age, which can affect its relevance and retention requirements. These criteria help establish appropriate security controls.
Sensitivity refers to the potential negative impact if the data is compromised (e.g., disclosed, modified, destroyed) and is a primary driver for assigning a classification level.
The value of data to the organization, encompassing its importance for business operations, legal compliance, or competitive advantage, directly influences its classification and the resources allocated to protect it.
While useful life is related to retention, it is more about how long data remains relevant for its original purpose rather than a direct criterion for its initial security classification level.
Storage cost is an operational expense and a factor in data management, but it does not directly determine the security classification level of the data itself.
The age of data can be a factor, as older data might lose its sensitivity or value over time, potentially allowing for reclassification or eventual disposition based on retention policies.
Concept tested: Data classification criteria
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-overview?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.