SY0-501 · Question #499
Ann is the IS manager for several new systems in which the classifications of the systems' data are being decided. She is trying to determine the sensitivity level of the data being processed. Which…
The correct answer is D. Owner. To determine the sensitivity level and classification of data, the IS manager should consult the data owner, who holds ultimate accountability for the data's protection and usage.
Question
Ann is the IS manager for several new systems in which the classifications of the systems' data are being decided. She is trying to determine the sensitivity level of the data being processed. Which of the following people should she consult to determine the data classification?
Options
- ASteward
- BCustodian
- CUser
- DOwner
How the community answered
(41 responses)- A5% (2)
- B7% (3)
- C17% (7)
- D71% (29)
Why each option
To determine the sensitivity level and classification of data, the IS manager should consult the data owner, who holds ultimate accountability for the data's protection and usage.
A data steward is typically responsible for data quality, standards, and governance, acting on behalf of the owner, but does not hold the ultimate accountability for initial classification decisions.
A data custodian is responsible for the technical safeguarding and maintenance of data, such as backups and system security, but does not define its sensitivity or classification level.
A user interacts with the data, but generally lacks the comprehensive organizational view, authority, or accountability required to officially determine its classification and sensitivity.
The data owner is the individual or entity ultimately accountable for the data, including its classification, protection, and compliance throughout its lifecycle. They are responsible for defining the appropriate classification and protection requirements for the data they own, making them the authoritative source for determining its sensitivity.
Concept tested: Data ownership and classification responsibilities
Source: https://learn.microsoft.com/en-us/training/modules/govern-identity-access-data-privacy-security-operations/3-data-protection
Topics
Community Discussion
No community discussion yet for this question.