7. Data Protection

Question 1

Data Loss Prevention (DLP)

Answer 1

Strategy to prevent sensitive information from leaving an organization

Question 2

Data Classification

Answer 2

Based on the value to the organization and the sensitivity of the information, determined by the data owner

Question 3

Sensitive Data (Business)

Answer 3

Information that, if accessed by unauthorized persons, can result in the loss of security or competitive advantage for a company

Question 4

Public Data (Business)

Answer 4

No impact if released; often publicly accessible

Question 5

Private Data (Business)

Answer 5

Contains internal personnel or salary infromation

Question 6

Confidential (Business)

Answer 6

Trade Secrets, intellectual property, source codes, ect.

Question 7

Critical (Business)

Answer 7

Extremely valuable and restricted information

Question 8

Unclassified (Gov)

Answer 8

Generally releasable to the public

Question 9

Sensitive but Unclassified (Gov)

Answer 9

Includes medical records, personnel files, etc.

Question 10

Confidential (Gov)

Answer 10

Contains information that could affect the government

Question 11

Secret (Gov)

Answer 11

Holds data like military deployment plans, defensive postures

Question 12

Top Secret (Gov)

Answer 12

Highest level, includes highly sensitive national security information

Question 13

Data Ownership

Answer 13

Process of identifying the individual responsible for maintaining the
confidentiality, integrity, availability, and privacy of information assets

Question 14

Data Owner

Answer 14

A senior executive responsible for labeling information assets and ensuring they are protected with appropriate controls

Question 15

Data Controller

Answer 15

Entity responsible for determining data storage, collection, and usage purposes and methods, as well as ensuring the legality of these processes

Question 16

Data Processor

Answer 16

A group or individual hired by the data controller to assist with tasks like data collection and processing

Question 17

Data Steward

Answer 17

Focuses on data quality and metadata, ensuring data is appropriately labeled and classified, often working under the data owner

Question 18

Data Custodian

Answer 18

Responsible for managing the systems on which data assets are stored, including enforcing access controls, encryption, and backup measures

Question 19

Endpoint DLP System

Answer 19

on workstation or laptop

Question 20

Network DLP System

Answer 20

Paced at network perimeter

Question 21

Storage DLP system

Answer 21

On a server in the data center

Question 22

Data States

Answer 22

Data At Rest
Data In Transit
Data in Use