CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 424


A hospital has three data classification levels: shareable without restrictions, shareable with restrictions, and internal use only. Which of the following BEST demonstrates adhering to principles of good enterprise data classification?

Show Answer
Correct Answer: A

The employee code of conduct marked 'shareable with restrictions' being posted in an area accessible to patients demonstrates adherence to data classification principles. This option recognizes that while the information is restricted, it can be shared with certain conditions. Other options involve sensitive information being disclosed in areas where it could be accessed inappropriately, violating data classification policies.

Discussion

3 comments
Sign in to comment
jackdryanOption: C
May 15, 2023

C is correct

gjimenezfOption: C
Feb 2, 2024

lunchroom is an area for employees only, option A says patients could have access (public) but document is classified as shareable with restrictions

klarak
May 2, 2024

I guarantee contractors who are not direct employees have access to that room. Another terrible cert question…