A company is designing a data classification scheme. The marketing team wants to share product brochures publicly. The HR team wants to keep employee salary information confidential. The legal team wants to keep merger negotiations restricted. Which classification levels should the company define?

Public, Internal, Confidential, Restricted

Internal, Confidential, Restricted

Public, Confidential, Restricted

What is the first step in the data classification process?

Define classification categories

Identify and inventory the data

A company is moving to the cloud and wants to implement data classification. They have a mix of structured and unstructured data. What is the primary purpose of classifying this data?

To apply appropriate security controls based on the sensitivity of the data.

To improve data quality by identifying and removing duplicates.

To meet regulatory compliance requirements.

To reduce storage costs by identifying data that can be archived.

Which criterion is most commonly used to determine the classification level of data?

The data's impact on the organization if it is compromised or lost

The storage location of the data

GIAC Cloud Security Architecture and Design

Domain 3Objective 4

Data Classification and Resource Tagging GCAD Practice Questions (Page 2)

Part of the Data Protection and Security domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 6–10

6application · easy
A company is designing a data classification scheme. The marketing team wants to share product brochures publicly. The HR team wants to keep employee salary information confidential. The legal team wants to keep merger negotiations restricted. Which classification levels should the company define?
Select an answer first
7foundation · easy
What is the first step in the data classification process?
Select an answer first
8foundation · easy
Which data classification category typically includes information that, if disclosed, could cause serious harm to an organization or individuals?
Select an answer first
9application · easy
A company is moving to the cloud and wants to implement data classification. They have a mix of structured and unstructured data. What is the primary purpose of classifying this data?
Select an answer first
10foundation · easy
Which criterion is most commonly used to determine the classification level of data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.