nerdexam
CompTIA

SY0-301 · Question #833

An organization is recovering data following a datacenter outage and determines that backup copies of files containing personal information were stored in an unsecure location, because the…

The correct answer is C. Data classification. Data classification assigns sensitivity labels to data, ensuring it is handled, stored, and protected according to its sensitivity level and preventing unauthorized or insecure storage.

Security program management and oversight

Question

An organization is recovering data following a datacenter outage and determines that backup copies of files containing personal information were stored in an unsecure location, because the sensitivity was unknown. Which of the following activities should occur to prevent this in the future?

Options

  • ABusiness continuity planning
  • BQuantitative assessment
  • CData classification
  • DQualitative assessment

How the community answered

(71 responses)
  • A
    4% (3)
  • B
    6% (4)
  • C
    89% (63)
  • D
    1% (1)

Why each option

Data classification assigns sensitivity labels to data, ensuring it is handled, stored, and protected according to its sensitivity level and preventing unauthorized or insecure storage.

ABusiness continuity planning

Business continuity planning focuses on maintaining or restoring operations after a disruption, not on labeling data sensitivity to ensure proper storage.

BQuantitative assessment

Quantitative assessment assigns numerical values to risks (e.g., monetary loss), which does not directly address the problem of unknown data sensitivity driving improper storage decisions.

CData classificationCorrect

Data classification is the process of categorizing data based on its sensitivity, confidentiality, or regulatory requirements (e.g., public, internal, confidential, restricted). If backup copies of personal information had been classified correctly, the appropriate handling and storage requirements would have been known, preventing them from being placed in an unsecured location.

DQualitative assessment

Qualitative assessment evaluates risks using descriptive rankings (high, medium, low) rather than addressing the root cause of data being stored insecurely due to unclassified sensitivity.

Concept tested: Data classification for sensitive information handling

Source: https://learn.microsoft.com/en-us/compliance/assurance/assurance-data-classification-and-labels

Topics

#data classification#data sensitivity#backup security#information management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SY0-301 Practice