A global bank is updating its data classification policy. The bank operates in multiple jurisdictions with varying data protection regulations. The policy must define classification levels, assign responsibility for classification, and ensure that data mapping is performed to meet regulatory requirements. The bank's CISO wants the policy to be enforceable across all regions. What is the most critical element to include in the policy to achieve this?

A single global classification scheme with regional adaptations

Separate classification policies for each region

A classification scheme based on the strictest regulation

A classification scheme based on the least strict regulation

A multinational corporation is revising its data classification policy. The policy must define roles and responsibilities for data classification, establish classification levels, and require data mapping. The corporation has subsidiaries in countries with conflicting data protection laws. What is the best way to structure the policy?

Create a single policy that applies the strictest requirements globally

Create a global policy framework with regional addenda for specific legal requirements

Create a policy that only covers the headquarters' jurisdiction

Create separate policies for each subsidiary

A cloud storage provider wants to enforce data retention policies based on data classification. They have millions of objects. They need to ensure that objects classified as 'Restricted' are retained for 7 years, while 'Public' objects are retained for 1 year. What is the most scalable way to achieve this?

Manually review each object and set retention

Store objects in different buckets based on classification

Apply metadata tags to objects indicating classification and use lifecycle policies

A company is implementing labeling and tagging for its data. They have selected a tool that supports both visual labels and metadata tags. What is the most important factor to consider when integrating this tool with their existing data lifecycle management system?

The tool's ability to apply labels and tags consistently across all data types

Certified Cloud Security Professional

Domain 2Objective 5

Plan and Implement Data Classification CCSP Practice Questions (Page 1)

Part of the Cloud Data Security domain, which accounts for 20% of the CCSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

20%of the exam

Questions 1–5

1expert · hard
A global bank is updating its data classification policy. The bank operates in multiple jurisdictions with varying data protection regulations. The policy must define classification levels, assign responsibility for classification, and ensure that data mapping is performed to meet regulatory requirements. The bank's CISO wants the policy to be enforceable across all regions. What is the most critical element to include in the policy to achieve this?
Select an answer first
2expert · hard
A multinational corporation is revising its data classification policy. The policy must define roles and responsibilities for data classification, establish classification levels, and require data mapping. The corporation has subsidiaries in countries with conflicting data protection laws. What is the best way to structure the policy?
Select an answer first
3application · medium
An organization is implementing data classification and wants to ensure that employees can visually identify the sensitivity of documents and emails. Which mechanism should be implemented?
Select an answer first
4expert · hard
A cloud storage provider wants to enforce data retention policies based on data classification. They have millions of objects. They need to ensure that objects classified as 'Restricted' are retained for 7 years, while 'Public' objects are retained for 1 year. What is the most scalable way to achieve this?
Select an answer first
5application · medium
A company is implementing labeling and tagging for its data. They have selected a tool that supports both visual labels and metadata tags. What is the most important factor to consider when integrating this tool with their existing data lifecycle management system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CCSP” is a trademark of its owner, used for identification only.

Plan and Implement Data Classification CCSP Practice Questions (Page 1)

Questions 1–5

An organization is implementing data classification and wants to ensure that employees can visually identify the sensitivity of documents and emails. Which mechanism should be implemented?

A company is implementing labeling and tagging for its data. They have selected a tool that supports both visual labels and metadata tags. What is the most important factor to consider when integrating this tool with their existing data lifecycle management system?

Keep studying — Cloud Data Security