Identity and Access Management
Question #77
Regarding the roles and responsibilities in data management, which of the following statements is true?
A. A person could simultaneously assume the roles of asset owner, custodian, and processor depending on the asset and timeframe.
B. Every employee must fulfill only one security-related role with no exceptions.
C. Each role should be responsible for managing only one category of data classification.
D. Different classification levels must be managed by different physical devices.
Domain Concept: Identity and Access Management
This scenario evaluates management-level decision making in Identity and Access Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.