During the media management lifecycle, what is the primary purpose of labeling media with classification markings?

To identify the manufacturer and model of the media device

To certify that the media has been sanitized and is safe for reuse

To indicate the sensitivity of the data and the required handling controls

To record the physical location of the media in the inventory system

A company is decommissioning a data center and must dispose of 500 hard drives. The drives contain data that is subject to a regulatory requirement for 'complete destruction' of the media. The company has a limited budget and must complete the disposal within one week. The drives are a mix of HDDs and SSDs. Which approach BEST meets the regulatory requirement while considering the budget and timeline?

Overwrite all drives with a multi-pass pattern using a software tool.

Use a certified third-party disposal service that physically shreds all drives and provides a certificate of destruction.

Degauss all drives and then sell them to a refurbisher.

Perform a cryptographic erase on all drives and then reuse them in a lab environment.

A hospital stores patient records on a network file server. The security team wants to protect the data at rest while allowing authorized staff to access files through the normal file-sharing protocol. Which solution BEST meets this need?

Move the files to a cloud storage service and rely on the provider's default encryption.

Encrypt individual files with a password and share the password with all authorized staff.

Use EFS (Encrypting File System) on each file and require users to log on locally to the server.

Enable BitLocker on the server's hard drives and use NTFS permissions to restrict access.

A law firm stores client documents on a shared network drive. The security team wants to protect the data at rest while allowing multiple users to collaborate on the same files. Which approach is MOST appropriate?

Disable file sharing and require users to email documents to each other.

Use a cloud storage service with client-side encryption.

Encrypt each file individually with a different password for each user.

Enable full-disk encryption on the file server and use file permissions to control access.

Certified Information Systems Security Professional

Domain 7Objective 5

7.5 - Apply Resource Protection CISSP Practice Questions (Page 3)

Part of the Security Operations domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 1–1 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

13%of the exam

Questions 11–15

11foundation · easy
During the media management lifecycle, what is the primary purpose of labeling media with classification markings?
Select an answer first
12expert · hard
A company is decommissioning a data center and must dispose of 500 hard drives. The drives contain data that is subject to a regulatory requirement for 'complete destruction' of the media. The company has a limited budget and must complete the disposal within one week. The drives are a mix of HDDs and SSDs. Which approach BEST meets the regulatory requirement while considering the budget and timeline?
Select an answer first
13application · medium
A hospital stores patient records on a network file server. The security team wants to protect the data at rest while allowing authorized staff to access files through the normal file-sharing protocol. Which solution BEST meets this need?
Select an answer first
14application · medium
A law firm stores client documents on a shared network drive. The security team wants to protect the data at rest while allowing multiple users to collaborate on the same files. Which approach is MOST appropriate?
Select an answer first
15foundation · easy
An organization stores backup tapes containing sensitive data in a locked cabinet. Which media protection technique does this exemplify?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

7.5 - Apply Resource Protection CISSP Practice Questions (Page 3)

Questions 11–15

During the media management lifecycle, what is the primary purpose of labeling media with classification markings?

A hospital stores patient records on a network file server. The security team wants to protect the data at rest while allowing authorized staff to access files through the normal file-sharing protocol. Which solution BEST meets this need?

A law firm stores client documents on a shared network drive. The security team wants to protect the data at rest while allowing multiple users to collaborate on the same files. Which approach is MOST appropriate?

An organization stores backup tapes containing sensitive data in a locked cabinet. Which media protection technique does this exemplify?

Keep studying — Security Operations