WorksheetsCISSP Asset Quiz
Total questions: 22
Worksheet time: 11mins
Complete this sentence: "The longer you keep data, …"
the more liable you are
True or false: all data should be handled in the same manner.
True
False
True or false: data is the only asset that needs to be classified.
True
False
What are the four basic steps of the Information Life Cycle?
Acquisition, Classification and Marking, Use and Archival, Destruction
Who should identify the classification of an information asset?
CISO
Information owner
CISM
After information is acquired by an organization what three steps should be taken?
Attach system metadata, process metadata, and index the data
What is degaussing?
Degaussing is the process of magnetic scrambling of the data on a tape or disk.
What is Data Leakage?
Data leakage is the the unauthorized transmission of information to an external destination.
Data leakage is the unauthorized transaction of data from one location to another.
What is Data Remanence?
Who is responsible for checking to see if controls are being implemented properly?
Auditor
Supervisor
CISO
Where should Data Marking be located on documents?
The cover and inside
What is Asset Security?
Asset Security is the concept of identifying what assets you have and determine what types of controls are appropriate for each.
What is a Data Backup?
Erasing, purging, and degaussing are examples of what?
Data destruction
What is the best way to ensure data privacy?
Limit the amount of data collected
In order to determine what information protection to apply to given information, what must you know first?
The classification level of the data
What is "single pass" data overwriting?
A method of data being overwritten once with a "1" or a "0"
Roles and responsibilities for data classification should be contained in what document?
What is Data Archival?
Data archival is a copy of data that is no longer in use, used in case the data is needed sometime in the future.
You need to declassify a data asset. Where should you look for guidance?
Your supervisor
Your organization's policies and procedures
Labeling data with the classification level is an example of what?
E-Discovery
Data Maintenance
Data Sharing
Data Marking
Who is responsible for maintaining data and implementing data controls?
CISO
Data Custodian
