Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Isaca CISM Exam - Topic 1 Question 95 Discussion

Actual exam question for Isaca's CISM exam

Question #: 95
Topic #: 1

[All CISM Questions]

The PRIMARY reason to properly classify information assets is to determine:

Aappropriate encryption strength using a risk-based approach.

Bthe business impact if assets are compromised.

Cthe appropriate protection based on sensitivity.

Duser access levels based on the need to know.

Show Suggested Answer

Suggested Answer: C

by Flo at Mar 20, 2025, 02:08 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Vanda

7 months ago

Really? I thought it was more about user access levels.

upvoted 0 times

...

Elmer

7 months ago

Totally agree, option B is the way to go!

upvoted 0 times

...

Francesco

7 months ago

Wait, are we sure it's not A? That sounds important too.

upvoted 0 times

...

Tamar

7 months ago

I think C makes more sense for sensitivity levels.

upvoted 0 times

...

Jaime

8 months ago

It's all about the business impact if assets are compromised.

upvoted 0 times

...

Arthur

8 months ago

I keep mixing up the reasons for classification. I thought it was about user access levels, but now I'm leaning towards the business impact.

upvoted 0 times

...

Van

8 months ago

I feel like this question is similar to one we practiced about risk management. I think the answer might be about encryption strength, but I could be wrong.

upvoted 0 times

...

Martha

8 months ago

I'm not entirely sure, but I remember something about determining appropriate protection based on sensitivity. That might be important too.

upvoted 0 times

...

Artie

9 months ago

I think the main reason for classifying information assets is to figure out the business impact if they're compromised. That seems to align with what we studied.

upvoted 0 times

...

Cherelle

9 months ago

I think the key here is understanding that classification is about managing risk. The right answer has to be the one that focuses on the business impact if the assets are compromised. That's the fundamental reason we classify in the first place.

upvoted 0 times

...

Annabelle

9 months ago

Okay, I've got this. The primary reason to classify information assets is to determine the appropriate protection based on the sensitivity of the data. That makes the most sense to me as the core purpose of classification.

upvoted 0 times

...

Chaya

9 months ago

Hmm, I'm a bit unsure about this one. I know classification is important, but I'm not sure if the primary reason is to determine encryption strength, business impact, protection, or access levels. I'll have to think this through carefully.

upvoted 0 times

...

Melodie

9 months ago

This seems like a straightforward question about information asset classification. I'll focus on understanding the key purpose, which is to determine the appropriate protection level.

upvoted 0 times

...

Carey

1 year ago

Hmm, this one's a thinker. I'll have to go with C. Can't have sensitive data running around unprotected, you know?

upvoted 0 times

Carmen

1 year ago

User 4: Agreed, we need to know how to protect our assets based on their sensitivity.

upvoted 0 times

...

Sage

1 year ago

User 3: Definitely, it's important to classify information assets properly.

upvoted 0 times

...

Tyra

1 year ago

User 2: Yeah, you're right. Can't risk having sensitive data compromised.

upvoted 0 times

...

Percy

1 year ago

User 1: I think the main reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...

Lauran

1 year ago

User 4: Agreed, we need to know how to protect our assets based on their sensitivity.

upvoted 0 times

...

Alyce

1 year ago

User 3: Definitely, it's important to classify information assets properly.

upvoted 0 times

...

Sherman

1 year ago

User 2: Yeah, you're right. Can't risk having sensitive data compromised.

upvoted 0 times

...

Kristine

1 year ago

User 1: I think the main reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...

...

Wade

1 year ago

Gotta love these tricky questions! I'd say A, though C is a close second. Encryption strength is critical for protecting sensitive info.

upvoted 0 times

...

Martin

1 year ago

I'd go with D. User access levels are key, so we can ensure the right people have the appropriate level of access.

upvoted 0 times

...

Malissa

1 year ago

I think user access levels based on need to know is also a key factor in classification.

upvoted 0 times

...

Fannie

1 year ago

I believe it's also important to consider the business impact if assets are compromised.

upvoted 0 times

...

Sabra

1 year ago

B is the way to go. Understanding the business impact is crucial for determining the right security measures.

upvoted 0 times

Mireya

1 year ago

C) the appropriate protection based on sensitivity.

upvoted 0 times

...

Jerry

1 year ago

B) the business impact if assets are compromised.

upvoted 0 times

...

Robt

1 year ago

A) appropriate encryption strength using a risk-based approach.

upvoted 0 times

...

...

Ruby

1 year ago

Option C makes the most sense to me. Protecting assets based on their sensitivity is the core reason for classification.

upvoted 0 times

Zack

1 year ago

Classifying information assets correctly is key to safeguarding them.

upvoted 0 times

...

Ramonita

1 year ago

It helps prioritize security measures effectively.

upvoted 0 times

...

Lenna

1 year ago

I agree, protecting assets based on sensitivity is crucial.

upvoted 0 times

...

...

Kimbery

1 year ago

I agree with Bernardo. Classifying information assets helps in applying the right level of protection.

upvoted 0 times

...

Bernardo

1 year ago

I think the primary reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...