Chapter 2 Data Classification

Which of the following is not a common method of data discovery?

• Content-based
• User-based
• Label-based
• Metadata-based

Sara is planning to implement data labeling for her organization. Which of the following is not a data label field that she should consider?

• Date data was created
• Data owner
• Data value
• Date of scheduled destruction

Sarah is continuing her data labeling efforts and has received suggestions for appropriate data labels for data that will be used in multiple countries in which her company operates as part of ongoing security and data lifecycle efforts. Which of the following is not a label that would help with that usage?

• Source
• Language
• Handling restrictions
• Jurisdiction

Asha wants to document the path that data takes from creation to storage in her institution's database. As part of that effort, she creates a data flow diagram. Which of the following is not a common element of a data flow diagram?

• Credentials used for each service listed
• Hostnames and IP addresses or address blocks for each system involved
• Ports and protocols used for data transfer
• Security controls used at each point in the diagram

Mei wants to conduct data discovery activities in her organization. Which of the following types of data discovery is best suited for identifying all photos that were taken using a specific model of camera based on the original files generated by the camera?

• Label-based
• Metadata-based
• Extension-based
• Content-based

Felix wants to monitor data transfers between two systems inside of his IaaS cloud–hosted data center. Which of the following audit mechanisms is unlikely to be available to him that is commonly available in on-premises environments?

• Log review
• Packet capture
• Data flow diagrams
• Log correlation

Megan is documenting roles as part of the implementation of her organization's data classification policy. Her organization uses a software as a service tool to accept applications from customers. What term best describes the SaaS vendor?

• A data custodian
• A data owner
• A data processor
• A data steward

Jaime has been informed of legal action against his company and must now ensure that data relevant to the case is kept. What term describes this?

• Legal retention
• Legal archiving
• Court hold
• Legal hold

All policies within the organization should include a section that includes all of the following except ___________________.

• Policy maintenance
• Policy monitoring
• Policy enforcement
• Policy transference

Melissa knows that many data destruction options are not available for data kept in the cloud due to how the services are architected using shared hardware and services. Which of the following is the best option for her organization to select for cloud-hosted data that must be disposed of in a secure manner?

• Melting
• Crypto-shredding
• Zeroization
• Overwriting