Exam CDPSE topic 1 question 110 discussion

Actual exam question from Isaca's CDPSE

Question #: 110
Topic #: 1

As part of a major data discovery initiative to identify personal data across the organization, the project team has identified the proliferation of personal data held as unstructured data as a major risk. What should be done FIRST to address this situation?

A. Identify sensitive unstructured data at the point of creation.
B. Classify sensitive unstructured data.
C. Identify who has access to sensitive unstructured data.
D. Assign an owner to sensitive unstructured data.

Show Suggested Answer

Suggested Answer: C 🗳️

by Ahbey_911 at Nov. 2, 2023, 3:29 p.m.

Comments

Submit Cancel

4dfe785

10 months, 3 weeks ago

Selected Answer: C

You can’t classify or apply controls effectively without understanding the scope of access.

upvoted 1 times

...

ARaghunanan

1 year, 4 months ago

Selected Answer: C

Determining who has access to this data will allow a PIA to be completed and the justification of a major risk will be determined.

upvoted 2 times

...

Ahbey_911

1 year, 9 months ago

B appear more correct, the data has been identified already. Addressing the proliferation of personal data held as unstructured data begins with understanding what data you have and how sensitive it is. Classifying sensitive unstructured data is the first step in this process. Once data is classified, it becomes easier to determine how it should be handled, who should have access to it, and what protective measures should be in place. Classification provides a foundation upon which other actions, such as identifying who has access, assigning ownership, and identifying data at the point of creation, can be based.

upvoted 3 times

kwassie

1 year, 9 months ago

I think its A. They have not identified the data yet. The question says they identified the increase of data as a risk, and to address that you must first be able to tag it at creation.

upvoted 1 times

...