nerdexam
(ISC)2

SSCP · Question #1316

Which of the following criteria is used to determine the proper classification of a data object? (Choose three)

The correct answer is A. Sensitivity B. Value E. Age. Data classification is determined by several factors, including the data's sensitivity (potential impact of compromise), its value to the organization, and its age, which can affect its relevance and retention requirements. These criteria help establish appropriate security…

Submitted by thandi_sa· Apr 18, 2026Security Concepts and Practices

Question

Which of the following criteria is used to determine the proper classification of a data object? (Choose three)

Options

  • ASensitivity
  • BValue
  • CUseful life
  • DStorage cost
  • EAge

How the community answered

(47 responses)
  • A
    94% (44)
  • C
    4% (2)
  • D
    2% (1)

Why each option

Data classification is determined by several factors, including the data's sensitivity (potential impact of compromise), its value to the organization, and its age, which can affect its relevance and retention requirements. These criteria help establish appropriate security controls.

ASensitivityCorrect

Sensitivity refers to the potential negative impact if the data is compromised (e.g., disclosed, modified, destroyed) and is a primary driver for assigning a classification level.

BValueCorrect

The value of data to the organization, encompassing its importance for business operations, legal compliance, or competitive advantage, directly influences its classification and the resources allocated to protect it.

CUseful life

While useful life is related to retention, it is more about how long data remains relevant for its original purpose rather than a direct criterion for its initial security classification level.

DStorage cost

Storage cost is an operational expense and a factor in data management, but it does not directly determine the security classification level of the data itself.

EAgeCorrect

The age of data can be a factor, as older data might lose its sensitivity or value over time, potentially allowing for reclassification or eventual disposition based on retention policies.

Concept tested: Data classification criteria

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-overview?view=o365-worldwide

Topics

#Data Classification#Data Security#Information Asset Management#Data Lifecycle

Community Discussion

No community discussion yet for this question.

Full SSCP Practice