CISSP Boot Camp Session 2a (Domain 2)

Which of the following statements is true about the information life cycle?

• It begins with archival and ends with classification
• Most information must be retained indefinitely
• The cycle begins with acquisition/creation and ends with disposal/destruction
• Preparing information for use usually does not involve adding metadata

Ensuring data consistency is important for all the following reasons, except:

• Replicated data sets can become desynchronized
• Multiple data items are commonly needed to perform a transaction
• Data may exist in multiple locations within our information systems.
• Multiple users could attempt to modify data simultaneously

Which of the following makes the most sense for a single organizaiton's classification levels for data?

• Unclassified, Secret, Top Secret
• Public, Releasable, Unclassified
• Sensitive, Sensitive but Unclassified, Proprietary
• Proprietary, Trade Secret, Private

Which of the following is the most important criterion in determining the classification of data?

• The level of damage that could be caused if the data were disclosed
• The likelihood that the data will be accidentally or maliciously disclosed
• Regulatory requirements in jurisdictions within which the organization is not operating
• The cost of implementing controls for the data

The effect of data aggregation on classification levels is best described by which of the following?

• Data classification standards apply to all the data within an organization.
• Aggregation is a disaster recovery tecnique with no effect on classification.
• A low-classification aggregation of data can be deconstructed into higher-classification data items.
• Items of low-classification data combine to create a higher-classification set

Who bears ultimate responsibility for the protection of assets within the organization?

• Data owners
• Cyber Insurance Providers
• Senior Management
• Security Professionals

Which of the following is not a phase of the information life cycle

• Acquisition
• Disposal
• Archival
• Revision

A transition into the disposal phase of the information life cycle is most commonly triggered by

• Senior Management
• Insufficient Storage
• Acceptable Use Policies
• Data Retention Policies

Information classification is most closely related to which of the following?

• The source of the information
• The information's destination
• The information's value
• The information's age

During which phase or phases of the information life cycle can cryptography be an effective control

• Use
• Archival
• Disposal
• Every phase