Why is continuous improvement important for a data classification scheme?

Because classification is a one-time project

Because automated tools can replace human judgment

Because data owners change frequently

Because data types and regulatory requirements change over time

What is the primary goal of training employees on data classification?

To ensure employees can classify data consistently and correctly

To eliminate the need for data owners

To reduce the need for automated tools

To make employees responsible for enforcing access controls

What is the primary criterion for classifying data as 'Internal' rather than 'Public'?

The data is subject to regulatory compliance

The data is not intended for public disclosure but its exposure would cause minimal harm

A healthcare organization stores patient records in an on-premises file server and also replicates them to a public cloud object storage for disaster recovery. The compliance team must ensure that any data containing protected health information (PHI) is labeled as 'Restricted' and that the label is visible to administrators when browsing the cloud storage. The organization uses a data classification tool that can scan both on-premises and cloud storage. What should the administrator configure to meet this requirement?

Run a discovery scan on both the file server and the cloud bucket, then apply a 'Restricted' tag to all objects that match PHI patterns.

Apply a 'Restricted' label to the entire file server share and rely on the replication to carry the label to the cloud objects.

Use a data loss prevention (DLP) tool to block any upload of PHI to the cloud, eliminating the need for classification.

Create a new bucket in the cloud and move all PHI data there, then set a bucket-level policy that denies access to non-admin users.

Which characteristic is essential for a well-designed data classification taxonomy?

It has at least ten levels to cover all possible data types

It is based on the storage location of the data

It is mutually exclusive and collectively exhaustive

NetAppCertified Cyber Resiliency Expert

Domain 4Objective 3

Determine How to Classify Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 3)

Part of the Governance and Compliance domain, which accounts for 12% of the CERTIFIED-CYBER-RESILIENCY-EXPERT exam. NetApp does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

13concepts

12%of the exam

13 Concepts in This Objective

Data Classification Fundamentals
Classification Categories and Levels
Regulatory and Compliance Drivers
Data Inventory and Discovery
Classification Schemes and Taxonomies
Ownership and Stewardship
Classification Process Workflow
Automation and Tooling
Handling Unstructured and Structured Data
Integration with Data Lifecycle
Policy and Governance Alignment
Training and Awareness
Audit and Continuous Improvement

Questions 11–15

11foundation · easy
Why is continuous improvement important for a data classification scheme?
Select an answer first
12foundation · easy
What is the primary goal of training employees on data classification?
Select an answer first
13foundation · easy
What is the primary criterion for classifying data as 'Internal' rather than 'Public'?
Select an answer first
14application · medium
A healthcare organization stores patient records in an on-premises file server and also replicates them to a public cloud object storage for disaster recovery. The compliance team must ensure that any data containing protected health information (PHI) is labeled as 'Restricted' and that the label is visible to administrators when browsing the cloud storage. The organization uses a data classification tool that can scan both on-premises and cloud storage. What should the administrator configure to meet this requirement?
Select an answer first
15foundation · easy
Which characteristic is essential for a well-designed data classification taxonomy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CERTIFIED-CYBER-RESILIENCY-EXPERT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by NetApp. “CERTIFIED-CYBER-RESILIENCY-EXPERT” is a trademark of its owner, used for identification only.