A company classifies its data into four levels: Public, Internal, Confidential, and Restricted. Which data would most likely be classified as Restricted?

Marketing brochures intended for public distribution

Quarterly sales figures shared with select partners

Employee training schedules shared within the company

A company has implemented data classification and labeling. However, employees are frequently ignoring the labels and mishandling sensitive data. Which of the following is the MOST effective way to improve compliance?

Automatically enforce handling rules based on classification labels.

Provide additional training to employees on the importance of labels.

Make the labels more prominent and colorful.

Increase the severity of penalties for non-compliance.

An employee is working on a document that contains sensitive customer information. The document is classified as 'Confidential'. The employee needs to share it with a colleague in the same office. What is the MOST secure way to share the document?

Print the document and leave it on the colleague's desk.

Place the document on a shared network drive with appropriate access controls.

Email the document to the colleague without encryption.

Copy the document to a USB drive and hand it to the colleague.

A company has a policy that all documents containing customer personal information must be labeled as 'Confidential' and must be encrypted when stored on portable devices. An employee needs to take a laptop home to finish a report that includes customer data. What is the MOST secure action for the employee to take?

Copy the file to a USB drive and carry it home.

Email the file to a personal email account to access it at home.

Store the file on the encrypted corporate laptop and ensure the laptop is encrypted.

Print the report and take the hard copy home.

A law firm handles highly sensitive client information. They have implemented a labeling system where documents are marked with 'Attorney-Client Privileged' and 'Confidential'. What is the PRIMARY purpose of these labels?

To inform handlers of the required level of protection and handling procedures

To make documents easier to search and retrieve

To comply with legal requirements for all documents

To prevent unauthorized access to the documents

Certified Information Systems Security Professional

Domain 2Objective 2

2.2 - Establish Information and Asset Handling Requirements CISSP Practice Questions (Page 3)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

10%of the exam

Questions 11–15

11foundation · easy
A company classifies its data into four levels: Public, Internal, Confidential, and Restricted. Which data would most likely be classified as Restricted?
Select an answer first
12expert · hard
A company has implemented data classification and labeling. However, employees are frequently ignoring the labels and mishandling sensitive data. Which of the following is the MOST effective way to improve compliance?
Select an answer first
13application · medium
An employee is working on a document that contains sensitive customer information. The document is classified as 'Confidential'. The employee needs to share it with a colleague in the same office. What is the MOST secure way to share the document?
Select an answer first
14application · medium
A company has a policy that all documents containing customer personal information must be labeled as 'Confidential' and must be encrypted when stored on portable devices. An employee needs to take a laptop home to finish a report that includes customer data. What is the MOST secure action for the employee to take?
Select an answer first
15application · medium
A law firm handles highly sensitive client information. They have implemented a labeling system where documents are marked with 'Attorney-Client Privileged' and 'Confidential'. What is the PRIMARY purpose of these labels?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.