Asset Security
Question #74
When considering various aspects of data classification in a large organization, which of the following statements are true?
A. Both government and non-government organizations use 'Confidential' labels at different levels even without a formal framework, sensitive data must be protected.
B. Data classification is determined by laws and regulations.
C. Larger companies must always implement more granular systems than smaller companies.
D. Data classification is only required for digital assets, not physical ones.
Domain Concept: Asset Security
This scenario evaluates management-level decision making in Asset Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.