Identify Data Classification Requirements CSSLP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which label is most appropriate for a dataset containing customer credit card numbers?

   • AConfidential
   • BInternal
   • CPublic
   • DUnclassified
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which sequence correctly represents the data lifecycle stages?

   • ARetention, generation, storage, disposal
   • BStorage, generation, retention, disposal
   • CDisposal, generation, storage, retention
   • DGeneration, storage, retention, disposal
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is building a data lake to store both structured data from transactional systems and unstructured data from social media feeds. The security team wants to apply consistent classification labels across both types, but the data engineering team argues that the classification approach must differ. What is the best way to reconcile these views?

   • AClassify only the structured data because unstructured data is too difficult to classify accurately
   • BUse different classification labels for structured and unstructured data to reflect their inherent differences
   • CClassify only the unstructured data because it poses a higher risk than structured data
   • DUse the same classification labels for both, but apply them using different methods: schema-based for structured and content inspection for unstructured
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A government agency is implementing a data classification program. They have a dataset of citizen records that is classified as 'restricted'. The agency's data custodian is responsible for implementing access controls, but the data owner is responsible for defining who should have access. A new system is being deployed, and the custodian needs to know the access requirements. What should the custodian do?

   • AGrant access only to the data owner and the custodian
   • BRequest the data owner to define the access requirements and then implement the controls
   • CGrant access to all employees who need it to perform their job functions, based on the data owner's authorization
   • DImplement the access controls based on the data classification level alone
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How should publicly available information be handled compared to PII?

   • APublic data requires the same strict controls as PII.
   • BPublic data can be freely shared without any restrictions.
   • CPublic data should be encrypted and access-controlled like PII.
   • DPublic data must be deleted immediately after use.
   Reveal Solution Discussion Select an answer first