An organization is creating a data classification policy. They have three types of data: financial reports, employee contact lists, and public marketing brochures. Which classification levels should be assigned?

Financial reports: Internal; Employee contact lists: Confidential; Marketing brochures: Public

All data should be classified as Confidential to ensure maximum protection.

Financial reports: Confidential; Employee contact lists: Internal; Marketing brochures: Public

Financial reports: Public; Employee contact lists: Internal; Marketing brochures: Confidential

An employee needs to send a document containing confidential customer data to a business partner. The document is currently stored on a shared drive. What is the MOST secure method of transmission?

Upload the document to a secure file-sharing service and send the partner an encrypted link

Copy the document to a USB drive and mail it

Attach the document to an unencrypted email

Fax the document to the partner

A healthcare organization is implementing a new data classification scheme. They have a database containing patient medical records, a shared drive with marketing materials, and a server with internal HR policies. The organization must ensure that the most sensitive data is protected with the highest level of security controls. Which action should the organization take FIRST?

Train employees on the new data classification scheme.

Assign classification levels to each data asset based on sensitivity and criticality.

Implement encryption for all data at rest and in transit.

Create data retention policies for each type of data.

For optical media such as CDs and DVDs containing sensitive data, which destruction method is considered most effective?

Shredding or physically breaking the disc

Deleting the files and then reusing the disc

Certified Information Systems Security Professional

Domain 2Objective 2

2.2 - Establish Information and Asset Handling Requirements CISSP Practice Questions (Page 5)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

10%of the exam

Questions 21–24

21application · medium
An organization is creating a data classification policy. They have three types of data: financial reports, employee contact lists, and public marketing brochures. Which classification levels should be assigned?
Select an answer first
22application · medium
An employee needs to send a document containing confidential customer data to a business partner. The document is currently stored on a shared drive. What is the MOST secure method of transmission?
Select an answer first
23application · medium
A healthcare organization is implementing a new data classification scheme. They have a database containing patient medical records, a shared drive with marketing materials, and a server with internal HR policies. The organization must ensure that the most sensitive data is protected with the highest level of security controls. Which action should the organization take FIRST?
Select an answer first
24foundation · easy
For optical media such as CDs and DVDs containing sensitive data, which destruction method is considered most effective?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.2 - Establish Information and Asset Handling Requirements CISSP Practice Questions (Page 5)

Questions 21–24

An organization is creating a data classification policy. They have three types of data: financial reports, employee contact lists, and public marketing brochures. Which classification levels should be assigned?

An employee needs to send a document containing confidential customer data to a business partner. The document is currently stored on a shared drive. What is the MOST secure method of transmission?

For optical media such as CDs and DVDs containing sensitive data, which destruction method is considered most effective?

Keep studying — Asset Security