Isaca Exam CISM Topic 1 Question 95 Discussion

Actual exam question for Isaca's CISM exam

Question #: 95
Topic #: 1

[All CISM Questions]

The PRIMARY reason to properly classify information assets is to determine:

Aappropriate encryption strength using a risk-based approach.

Bthe business impact if assets are compromised.

Cthe appropriate protection based on sensitivity.

Duser access levels based on the need to know.

Show Suggested Answer

Suggested Answer: C

by Flo at Mar 20, 2025, 02:08 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carey

17 days ago

Hmm, this one's a thinker. I'll have to go with C. Can't have sensitive data running around unprotected, you know?

upvoted 0 times

...

Wade

19 days ago

Gotta love these tricky questions! I'd say A, though C is a close second. Encryption strength is critical for protecting sensitive info.

upvoted 0 times

...

Martin

20 days ago

I'd go with D. User access levels are key, so we can ensure the right people have the appropriate level of access.

upvoted 0 times

...

Malissa

25 days ago

I think user access levels based on need to know is also a key factor in classification.

upvoted 0 times

...

Fannie

26 days ago

I believe it's also important to consider the business impact if assets are compromised.

upvoted 0 times

...

Sabra

27 days ago

B is the way to go. Understanding the business impact is crucial for determining the right security measures.

upvoted 0 times

...

Ruby

1 months ago

Option C makes the most sense to me. Protecting assets based on their sensitivity is the core reason for classification.

upvoted 0 times

Zack

17 days ago

Classifying information assets correctly is key to safeguarding them.

upvoted 0 times

...

Ramonita

19 days ago

It helps prioritize security measures effectively.

upvoted 0 times

...

Lenna

22 days ago

I agree, protecting assets based on sensitivity is crucial.

upvoted 0 times

...

Kimbery

1 months ago

I agree with Bernardo. Classifying information assets helps in applying the right level of protection.

upvoted 0 times

...

Bernardo

1 months ago

I think the primary reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...