What is the primary purpose of data classification?

To assign appropriate protection based on sensitivity and criticality

To encrypt all data in the organization

To reduce the amount of data stored

To make data accessible to all employees

A security analyst suspects that an attacker modified a critical configuration file on a server. The analyst wants to verify whether the file was changed and also wants to detect future unauthorized modifications. Which approach best addresses both needs?

Review the file's last modified timestamp in the filesystem.

Copy the file to a backup server and compare file sizes.

Encrypt the file with a symmetric key and store the key separately.

Compute a cryptographic hash of the file and compare it to a known-good baseline; then monitor for hash changes.

How can data labeling support automated policy enforcement?

By encrypting the data with a user's public key

By allowing systems to apply rules based on the label

By physically destroying the data when the label expires

Why is physical destruction considered a secure method for data destruction?

It is the only method accepted by regulations.

It is the fastest method and requires no special tools.

It preserves the data for future use.

It makes the storage media unusable and data unrecoverable.

An organization has implemented a data classification scheme with levels: public, internal, confidential, and restricted. Employees often mishandle confidential documents because they do not know which files are sensitive. Which measure would most directly address this issue?

Encrypt all files with a strong algorithm.

Increase the frequency of security awareness training.

Implement a data loss prevention (DLP) system.

Add visible labels to documents and email subject lines indicating their classification.

Certified in Cybersecurity

Domain 5Objective 1

5.1 - Understand Data Security CC Practice Questions (Page 7)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 31–35

31foundation · easy
What is the primary purpose of data classification?
Select an answer first
32application · medium
A security analyst suspects that an attacker modified a critical configuration file on a server. The analyst wants to verify whether the file was changed and also wants to detect future unauthorized modifications. Which approach best addresses both needs?
Select an answer first
33foundation · easy
How can data labeling support automated policy enforcement?
Select an answer first
34foundation · easy
Why is physical destruction considered a secure method for data destruction?
Select an answer first
35application · medium
An organization has implemented a data classification scheme with levels: public, internal, confidential, and restricted. Employees often mishandle confidential documents because they do not know which files are sensitive. Which measure would most directly address this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.