Determine How to Classify Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is implementing data classification and wants to ensure that data is classified at every stage of its lifecycle: creation, storage, access, and disposal. They have an automated tool that can apply labels. What is the most important thing to configure to ensure classification is applied consistently?

   • AApply a single label to all data at creation and never change it.
   • BSet up automated labeling rules that trigger when data is created, and rely on those labels for the rest of the lifecycle.
   • CConfigure the tool to re-evaluate and update labels at each lifecycle stage, including when data is accessed or modified.
   • DManually review and update labels at each lifecycle stage to ensure accuracy.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company is implementing a data classification program and has appointed data owners for each business unit. However, the data owners are not consistently applying the correct classification labels. What is the most effective way to ensure data owners understand their responsibilities?

   • AProvide role-based training for data owners that explains the classification criteria and their responsibilities.
   • BReplace data owners with an automated tool that assigns classifications based on file location.
   • CAutomatically reclassify data based on content patterns, bypassing the data owners.
   • DSend a one-time email to data owners reminding them of the classification policy.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company wants to ensure that all new documents created in their Microsoft 365 environment are automatically labeled with the appropriate classification. They also want to ensure that the label is applied before the document is shared externally. What should they configure?

   • AA script that runs weekly to apply labels to all documents in the tenant.
   • BA manual process where users must remember to apply a label before sharing.
   • CA data loss prevention (DLP) policy that blocks sharing of any document, regardless of label.
   • DA Microsoft 365 sensitivity label policy that automatically applies labels based on content and blocks sharing of unlabeled documents.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company is designing a data classification scheme. They have identified four categories: Public, Internal, Confidential, and Restricted. They need to decide which category should be used for employee salary information. What is the most appropriate classification for this data?

   • APublic
   • BInternal
   • CConfidential
   • DRestricted
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which activity is part of the classification process workflow?

   • AMonitoring network traffic
   • BEncrypting all data
   • CDeleting data that is no longer needed
   • DAssigning metadata tags to data assets
   Reveal Solution Discussion Select an answer first