Isaca Exam CISM Topic 1 Question 95 Discussion

Actual exam question for Isaca's CISM exam

Question #: 95
Topic #: 1

[All CISM Questions]

The PRIMARY reason to properly classify information assets is to determine:

Aappropriate encryption strength using a risk-based approach.

Bthe business impact if assets are compromised.

Cthe appropriate protection based on sensitivity.

Duser access levels based on the need to know.

Show Suggested Answer

Suggested Answer: C

by Flo at Mar 20, 2025, 02:08 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carey

2 months ago

Hmm, this one's a thinker. I'll have to go with C. Can't have sensitive data running around unprotected, you know?

upvoted 0 times

Carmen

13 days ago

User 4: Agreed, we need to know how to protect our assets based on their sensitivity.

upvoted 0 times

...

Sage

14 days ago

User 3: Definitely, it's important to classify information assets properly.

upvoted 0 times

...

Tyra

14 days ago

User 2: Yeah, you're right. Can't risk having sensitive data compromised.

upvoted 0 times

...

Percy

15 days ago

User 1: I think the main reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...

Lauran

20 days ago

User 4: Agreed, we need to know how to protect our assets based on their sensitivity.

upvoted 0 times

...

Alyce

22 days ago

User 3: Definitely, it's important to classify information assets properly.

upvoted 0 times

...

Sherman

1 months ago

User 2: Yeah, you're right. Can't risk having sensitive data compromised.

upvoted 0 times

...

Kristine

2 months ago

User 1: I think the main reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...

Wade

2 months ago

Gotta love these tricky questions! I'd say A, though C is a close second. Encryption strength is critical for protecting sensitive info.

upvoted 0 times

...

Martin

2 months ago

I'd go with D. User access levels are key, so we can ensure the right people have the appropriate level of access.

upvoted 0 times

...

Malissa

3 months ago

I think user access levels based on need to know is also a key factor in classification.

upvoted 0 times

...

Fannie

3 months ago

I believe it's also important to consider the business impact if assets are compromised.

upvoted 0 times

...

Sabra

3 months ago

B is the way to go. Understanding the business impact is crucial for determining the right security measures.

upvoted 0 times

Mireya

1 months ago

C) the appropriate protection based on sensitivity.

upvoted 0 times

...

Jerry

2 months ago

B) the business impact if assets are compromised.

upvoted 0 times

...

Robt

2 months ago

A) appropriate encryption strength using a risk-based approach.

upvoted 0 times

...

Ruby

3 months ago

Option C makes the most sense to me. Protecting assets based on their sensitivity is the core reason for classification.

upvoted 0 times

Zack

2 months ago

Classifying information assets correctly is key to safeguarding them.

upvoted 0 times

...

Ramonita

2 months ago

It helps prioritize security measures effectively.

upvoted 0 times

...

Lenna

3 months ago

I agree, protecting assets based on sensitivity is crucial.

upvoted 0 times

...

Kimbery

3 months ago

I agree with Bernardo. Classifying information assets helps in applying the right level of protection.

upvoted 0 times

...

Bernardo

3 months ago

I think the primary reason is to determine appropriate protection based on sensitivity.

upvoted 0 times

...