A global technology company is designing a data classification framework. The company operates in multiple jurisdictions with varying privacy laws. The legal team has determined that some data must be classified as 'Restricted' due to regulatory requirements, while other data is 'Confidential' based on business sensitivity. The company wants to minimize the burden on employees while ensuring compliance. What is the best approach?

Create separate classification schemes for each jurisdiction to ensure local compliance

Classify all data as 'Restricted' to ensure the highest level of protection

Implement a single classification scheme with clear definitions and automated tools to suggest labels based on data content

Allow each business unit to define its own classification labels

GIAC Information Security Professional

Domain 1Objective 2

Asset Security GISP Practice Questions (Page 11)

Part of the Security Management and Risk domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 12–20 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

7concepts

Questions 51–51

51expert · hard
A global technology company is designing a data classification framework. The company operates in multiple jurisdictions with varying privacy laws. The legal team has determined that some data must be classified as 'Restricted' due to regulatory requirements, while other data is 'Confidential' based on business sensitivity. The company wants to minimize the burden on employees while ensuring compliance. What is the best approach?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Asset Security GISP Practice Questions (Page 11)

Questions 51–51

Keep studying — Security Management and Risk