Identify Data Classification Requirements CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare organization is implementing a data dictionary to document all data elements. The compliance team needs to assign accountability for the accuracy and classification of patient records, while the IT operations team will manage the technical storage and backups. Who should be designated as the data owner for patient records, and what is their primary responsibility?

   • AThe database administrator, who is responsible for the physical design and performance of the patient record system
   • BThe IT operations manager, who is responsible for implementing access controls and backup procedures
   • CThe chief medical officer, who is responsible for defining the business value, sensitivity, and authorized use of patient records
   • DThe compliance officer, who is responsible for auditing access logs and ensuring regulatory reporting
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is implementing a data classification program. They have a database of customer orders (structured) and a collection of email correspondence with clients (unstructured). What is the primary difference in how these two data types should be handled for classification?

   • AStructured data requires more stringent classification because it is always more sensitive than unstructured data
   • BBoth data types should be classified identically because classification is based solely on the storage location
   • CStructured data can be classified automatically using schema and field-level metadata, while unstructured data requires content inspection and manual review
   • DUnstructured data is easier to classify because it is stored in a single format
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of structured data?

   • AAn email message with an attachment
   • BA relational database table with defined columns
   • CA video recording of a training session
   • DA PDF report containing narrative text
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is migrating its data to a new system. They have a relational database with customer profiles (structured) and a document management system with contracts and emails (unstructured). What is a key challenge when classifying the unstructured data?

   • AUnstructured data requires content inspection to identify sensitive information because it lacks a predefined schema
   • BUnstructured data cannot be classified because it lacks any metadata
   • CUnstructured data is always less sensitive than structured data
   • DUnstructured data can be classified automatically using the same rules as structured data
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is considered personally identifiable information (PII)?

   • AAn organization's public phone number
   • BA product's model number
   • CA customer's email address
   • DA company's public stock ticker symbol
   Reveal Solution Discussion Select an answer first