Determine How to Classify Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of data classification in cyber resiliency governance?

   • ATo delete redundant data to reduce storage costs
   • BTo assign a level of sensitivity to data so that protection and handling requirements can be applied consistently
   • CTo encrypt all data at rest and in transit
   • DTo provide a backup schedule for all data assets
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has had a data classification program in place for two years. Recently, a new data privacy regulation was enacted that requires a new category of data to be classified as 'Restricted'. The company's current scheme does not have a way to identify this new category. What should the company do to ensure compliance?

   • AWait until the next annual review to update the classification scheme.
   • BImmediately reclassify all data as 'Restricted' to ensure compliance with the new regulation.
   • CUpdate the classification scheme to include the new category, then run a discovery scan to identify and reclassify affected data.
   • DCreate a separate classification scheme for the new regulation and apply it only to new data.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a large amount of unstructured data in network shares. They want to use an automated tool to classify this data, but they are concerned about the accuracy of automated classification. They have a limited budget and cannot afford a tool that requires extensive tuning. What is the best approach to balance accuracy and cost?

   • AClassify all unstructured data as 'Confidential' and rely on that as a baseline.
   • BUse a tool that requires manual creation of custom classifiers for every data type.
   • CUse a tool with pre-built classifiers for common sensitive data types and then have data stewards review a sample of the results.
   • DUse a tool that only scans file names and extensions to infer classification.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of creating a data inventory?

   • ATo comply with data retention laws
   • BTo provide a complete map of where data resides and its characteristics
   • CTo reduce storage costs by deleting unused data
   • DTo ensure all data is encrypted
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary role of a data steward in the classification process?

   • ATo design the classification taxonomy
   • BTo approve access requests for classified data
   • CTo make final classification decisions
   • DTo implement and enforce classification policies on a day-to-day basis
   Reveal Solution Discussion Select an answer first