Introduction to Data Security CSCU Practice Questions (Page 8)

Questions 36–36

1. 36expert · hard

   A multinational corporation is implementing a data classification policy. They have the following data types: customer payment card information (PCI), employee performance reviews, and marketing brochures. The company operates in multiple countries with varying data protection regulations. Which approach best balances compliance and operational efficiency?

   • AClassify all data as 'Confidential' to ensure maximum protection and simplify compliance.
   • BApply the same protection level to all data to avoid complexity.
   • COutsource data classification to a third-party vendor to ensure compliance.
   • DUse a tiered classification system and apply the most stringent protection to payment card data, moderate protection to employee reviews, and minimal protection to marketing brochures.
   Reveal Solution Discussion Select an answer first