An information security manager believes that information has been classified inappropriately, = the risk of a breach. Which of the following is the information security manager's BEST action?
Suggested Answer: D
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
TE
Tesha
11 months ago
Wait, can you just re-classify data like that? Seems risky!
RE
Remedios
11 months ago
C could work, but are the system owners really qualified?
LU
Lura
12 months ago
D sounds like a thorough approach, but it takes time.
FR
Francis
12 months ago
Not sure about that, A might be safer.
CA
Carin
12 months ago
I think B is the best choice. Re-classifying is crucial!
MA
Marion
1 year ago
Instructing system owners to reclassify seems risky; they might not have the full context. I feel like I’ve seen this scenario in practice exams before.
AL
Alease
1 year ago
I lean towards completing a risk assessment before taking any action. It seems like the most thorough approach, but I’m not entirely confident.
MA
Margot
1 year ago
I think re-classifying the data directly might be too hasty without a proper assessment first. I feel like we practiced a question similar to this.
MY
My
1 year ago
I remember discussing the importance of data classification in our last class, but I'm not sure if referring to internal audit is the best first step.
TH
Theresia
1 year ago
Hmm, I'm a bit confused on how to properly configure the mirroring and cache. Should the disks be mirrored and the flash devices used as cache, or is there a different way to set that up?
RO
Ronald
1 year ago
This looks pretty straightforward. I think I can handle this by following the steps in the explanation.