What is data classification?
- A.Encrypting all data the same way, since need to know is satisfied automatically once a user holds the right clearance
- B.Organizing files by file size, because a security baseline is a list of exceptions rather than a minimum standard
- C.Categorizing data based on its sensitivity level to determine appropriate handling and protection requirements
- D.Sorting data alphabetically
Why C is correct
Data classification categorizes information by sensitivity (e.g., Public, Internal, Confidential, Restricted/Top Secret). Each level has specific handling requirements for storage, transmission, access control, and disposal. Proper classification ensures appropriate protection - sensitive data gets stronger controls while public data doesn't need the same restrictions.
Know someone studying for Security Fundamentals? Send them this one.