Determine How to Classify Data CERTIFIED-CYBER-RESILIENCY-EXPERT Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which regulation specifically requires healthcare providers to protect the privacy of individually identifiable health information, which necessitates classifying such data?

   • AGDPR
   • BSOX
   • CHIPAA
   • DGLBA
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which approach is most effective for classifying unstructured data such as emails and documents?

   • AUsing database schema analysis
   • BClassifying based on storage location only
   • CApplying content analysis techniques like keyword matching and machine learning
   • DRelying solely on file extension
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A global company is designing a data classification scheme. They have operations in countries with different data protection laws. Some countries require that certain data be classified as 'Restricted', while others do not. The company wants a single global scheme to simplify management. What is the best approach?

   • ACreate a separate classification scheme for each region to fully comply with local laws.
   • BUse the highest classification level for all data across all regions to ensure compliance with the strictest regulation.
   • CUse a single scheme with only two levels: 'Public' and 'Restricted', to simplify compliance.
   • DAdopt a single scheme with a metadata field for 'Regulatory Region' to allow for region-specific classification decisions.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company has implemented a data classification policy with labels such as 'Public', 'Internal', 'Confidential', and 'Restricted'. However, employees frequently misclassify data, often labeling sensitive data as 'Internal' instead of 'Confidential'. What is the most effective way to improve classification accuracy?

   • AChange the classification labels to be more intuitive, such as using colors instead of words.
   • BAutomatically reclassify any data labeled 'Internal' to 'Confidential' if it contains certain keywords.
   • CProvide regular training sessions that include examples of data types and the correct classification for each.
   • DEliminate the 'Internal' label so that employees must choose between 'Public' and 'Confidential'.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is the first step in a typical data classification workflow?

   • AApplying access controls
   • BTraining users on classification
   • CIdentifying and inventorying the data assets
   • DAssigning metadata tags
   Reveal Solution Discussion Select an answer first