Asset Security
Question #92
When formulating a Data Classification policy for a medium-sized enterprise, what is the foremost aspect to consider?
A. The highest classification level must be 'Top Secret'.
B. The lowest classification level must be 'Public'.
C. All information should be tagged as 'Proprietary' by default.
D. Each classification level should have its own handling and destruction requirements.
Domain Concept: Asset Security
This scenario evaluates management-level decision making in Asset Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.