CISSP Asset Quiz

Complete this sentence: "The longer you keep data, …"

• the more likely it is to become outdated or irrelevant
• the more accurate it becomes
• the less likely it is to be compromised
• the more liable you are

Answer explanation

Businesses should take into account the useful life of data and associated legal and regulatory requirements to determine how long data should be retained.

True or false: all data should be handled in the same manner.

• True

• False

Answer explanation

Each classification level should have separate handling requirements and procedures.

True or false: data is the only asset that needs to be classified.

• True

• False

Answer explanation

Applications and systems may also need to be classified.

What are the four basic steps of the Information Life Cycle?

• Development, Application, Retention, Removal
• Acquisition, Classification and Marking, Use and Archival, Destruction

• Creation, Use, Maintenance, Disposal
• Generation, Utilization, Preservation, Elimination

Answer explanation

There are other life cycle models but this is the one we teach in the Human Element course.

Who should identify the classification of an information asset?

• IT department
• CISO

• Information owner

• CISM

Answer explanation

 

The information owner should: Understand the organization's classification scheme, be familiar with legal and regulatory requirements, carry out classification processes in a consistent manner, have the processes reviewed, and carry out declassification processes when necessary.

After information is acquired by an organization what three steps should be taken?

• Research, Test, Conclude
• Collect, Organize, Present
• Attach system metadata, process metadata, and index the data

• Evaluate, Plan, Execute

Answer explanation

The data is indexed to facilitate searching.

What is degaussing?

• Degaussing is the process of decreasing or eliminating a remnant magnetic field.
• Degaussing is the process of converting sound waves into magnetic fields.
• Degaussing is the process of increasing a remnant magnetic field.
• Degaussing is the process of magnetic scrambling of the data on a tape or disk.

What is Data Leakage?

• Data leakage is the the unauthorized transmission of information to an external destination.

• Data leakage is the process of securing data to prevent unauthorized access.
• Data leakage is the practice of backing up data regularly to prevent loss.
• Data leakage is the unauthorized transaction of data from one location to another.

What is Data Remanence?

• Data remanence refers to the speed at which data is accessed
• Data remanence is the process of creating new data from scratch
• Data remanence is the encryption of data during transmission
• Data remanence is the residual representation of data that remains even after attempts have been made to remove or erase the data.

Who is responsible for checking to see if controls are being implemented properly?

• Auditor

• Supervisor

• Risk management team
• CISO