The PRIMARY reason to properly classify information assets is to determine:
Suggested Answer: C
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
VA
Vanda
10 months ago
Really? I thought it was more about user access levels.
EL
Elmer
10 months ago
Totally agree, option B is the way to go!
FR
Francesco
10 months ago
Wait, are we sure it's not A? That sounds important too.
TA
Tamar
10 months ago
I think C makes more sense for sensitivity levels.
JA
Jaime
11 months ago
It's all about the business impact if assets are compromised.
AR
Arthur
11 months ago
I keep mixing up the reasons for classification. I thought it was about user access levels, but now I'm leaning towards the business impact.
VA
Van
11 months ago
I feel like this question is similar to one we practiced about risk management. I think the answer might be about encryption strength, but I could be wrong.
MA
Martha
11 months ago
I'm not entirely sure, but I remember something about determining appropriate protection based on sensitivity. That might be important too.
AR
Artie
12 months ago
I think the main reason for classifying information assets is to figure out the business impact if they're compromised. That seems to align with what we studied.
CH
Cherelle
12 months ago
I think the key here is understanding that classification is about managing risk. The right answer has to be the one that focuses on the business impact if the assets are compromised. That's the fundamental reason we classify in the first place.
AN
Annabelle
12 months ago
Okay, I've got this. The primary reason to classify information assets is to determine the appropriate protection based on the sensitivity of the data. That makes the most sense to me as the core purpose of classification.
CH
Chaya
1 year ago
Hmm, I'm a bit unsure about this one. I know classification is important, but I'm not sure if the primary reason is to determine encryption strength, business impact, protection, or access levels. I'll have to think this through carefully.
ME
Melodie
1 year ago
This seems like a straightforward question about information asset classification. I'll focus on understanding the key purpose, which is to determine the appropriate protection level.
CA
Carey
2 years ago
Hmm, this one's a thinker. I'll have to go with C. Can't have sensitive data running around unprotected, you know?
CA
Carmen
1 year ago
User 4: Agreed, we need to know how to protect our assets based on their sensitivity.
SA
Sage
1 year ago
User 3: Definitely, it's important to classify information assets properly.
TY
Tyra
1 year ago
User 2: Yeah, you're right. Can't risk having sensitive data compromised.
PE
Percy
1 year ago
User 1: I think the main reason is to determine appropriate protection based on sensitivity.
LA
Lauran
1 year ago
User 4: Agreed, we need to know how to protect our assets based on their sensitivity.
AL
Alyce
1 year ago
User 3: Definitely, it's important to classify information assets properly.
SH
Sherman
1 year ago
User 2: Yeah, you're right. Can't risk having sensitive data compromised.
KR
Kristine
1 year ago
User 1: I think the main reason is to determine appropriate protection based on sensitivity.
WA
Wade
2 years ago
Gotta love these tricky questions! I'd say A, though C is a close second. Encryption strength is critical for protecting sensitive info.
MA
Martin
2 years ago
I'd go with D. User access levels are key, so we can ensure the right people have the appropriate level of access.
MA
Malissa
2 years ago
I think user access levels based on need to know is also a key factor in classification.
FA
Fannie
2 years ago
I believe it's also important to consider the business impact if assets are compromised.
SA
Sabra
2 years ago
B is the way to go. Understanding the business impact is crucial for determining the right security measures.
MI
Mireya
1 year ago
C) the appropriate protection based on sensitivity.
JE
Jerry
1 year ago
B) the business impact if assets are compromised.
RO
Robt
1 year ago
A) appropriate encryption strength using a risk-based approach.
RU
Ruby
2 years ago
Option C makes the most sense to me. Protecting assets based on their sensitivity is the core reason for classification.
ZA
Zack
2 years ago
Classifying information assets correctly is key to safeguarding them.
RA
Ramonita
2 years ago
It helps prioritize security measures effectively.
LE
Lenna
2 years ago
I agree, protecting assets based on sensitivity is crucial.
KI
Kimbery
2 years ago
I agree with Bernardo. Classifying information assets helps in applying the right level of protection.
BE
Bernardo
2 years ago
I think the primary reason is to determine appropriate protection based on sensitivity.