CSA Exam CCZT Topic 4 Question 15 Discussion

Actual exam question for CSA's CCZT exam

Question #: 15
Topic #: 4

[All CCZT Questions]

What should an organization's data and asset classification be based on?

ALocation of data

BHistory of data

CSensitivity of data

DRecovery of data
Data and asset classification should be based on the sensitivity of data, which is the degree to which the data requires protection from unauthorized access, modification, or disclosure. Data sensitivity is determined by the potential impact of data loss, theft, or corruption on the organization, its customers, and its partners. Data sensitivity can also be influenced by legal, regulatory, and contractual obligations.
Reference=
Certificate of Competence in Zero Trust (CCZT) prepkit, page 10, section 2.1.1
Identify and protect sensitive business data with Zero Trust, section 1
Secure data with Zero Trust, section 1
SP 800-207, Zero Trust Architecture, page 9, section 3.2.1

Show Suggested Answer

Suggested Answer: C

Proper risk management should be a key component of any ZT project, especially during implementation and adjustments, because it helps to identify, analyze, evaluate, and treat the potential risks that may affect the ZT and ZTA objectives and outcomes. Proper risk management also helps to prioritize the ZT and ZTA activities and resources based on the risk level and impact, and to monitor and review the risk mitigation strategies and actions.

Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 9: Risk Management

by Leslee at May 09, 2024, 07:29 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mozell

2 months ago

Wait, is 'location of data' even an option? That's like classifying files based on whether they're stored in the cloud or on-premises. Sensitivity is where it's at, folks.

upvoted 0 times

...

Curt

2 months ago

History of data? Really? That doesn't seem relevant at all for determining how to classify and protect it. C is the obvious choice here.

upvoted 0 times

Rima

10 days ago

Recovery of data is important too, but ultimately it comes down to how sensitive the data is.

upvoted 0 times

...

Lino

28 days ago

Location of data can also play a role, but sensitivity should be the main focus.

upvoted 0 times

...

Carline

29 days ago

Yeah, the impact of data loss or theft is crucial in determining how to classify and protect it.

upvoted 0 times

...

Maile

1 months ago

I agree, the sensitivity of data is definitely the most important factor to consider.

upvoted 0 times

...

Wynell

2 months ago

Haha, recovery of data? What, are we supposed to base our security on how easy it is to restore the information? Nah, sensitivity is clearly the way to go.

upvoted 0 times

Myong

19 days ago

Agreed, sensitivity of data should be the main focus for classification.

upvoted 0 times

...

Gaston

20 days ago

Sensitivity of data is crucial for protecting it from unauthorized access.

upvoted 0 times

...

Veronica

2 months ago

Recovery of data is not the best criteria for classification.

upvoted 0 times

...

Leslie

3 months ago

I was leaning towards location of data, but the explanation makes it clear that sensitivity is the key consideration. Gotta go with C on this one.

upvoted 0 times

Jarod

1 months ago

Sensitivity of data is a key factor in data classification to ensure proper security measures are in place. C is the way to go.

upvoted 0 times

...

Ryan

2 months ago

It's important to prioritize protecting sensitive data to prevent unauthorized access. C is definitely the right choice.

upvoted 0 times

...

Catalina

2 months ago

Absolutely, sensitivity of data is crucial for determining the level of protection needed. Good choice.

upvoted 0 times

...

Nicolette

2 months ago

I was leaning towards location of data, but the explanation makes it clear that sensitivity is the key consideration. Gotta go with C on this one.

upvoted 0 times

...

Gladys

3 months ago

But what about the location of data? Shouldn't that also play a role in classification?

upvoted 0 times

...

Vincenza

3 months ago

I agree with Antonio. The sensitivity of data determines how much protection it needs.

upvoted 0 times

...

Gayla

3 months ago

The sensitivity of the data is definitely the most important factor for data classification. It makes sense to prioritize protecting the most sensitive information.

upvoted 0 times