cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Newcomer I

Re: CISSP "sample" questions

Can data classification or encryption (criteria to encrypt) be included in confidentiality statement?
Highlighted
Community Champion

Re: CISSP "sample" questions

> shahzadafridi (Viewer II) posted a new reply in Certifications on 02-04-2019

> Can data classification or encryption (criteria to encrypt) be included in
> confidentiality statement?

Why not?

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Maybe we're all just part of God's `Sim Universe' video game.
Let's just hope that He's not playing on a Windows machine, or
we're all screwed. - Jeff Ehrhart
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

............
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468
Highlighted
Newcomer I

Re: CISSP "sample" questions

Then it is part of policy so why "D" option. I have doubts on background statement
Highlighted
Community Champion

Re: CISSP "sample" questions

@rslade I agree with your answer D. 

 

Your question has "element of a security planning mission statement".  In the planning phase, I am not concerned with encryption or data classification.  I would suggest at this point in time, I do not understand either the data classification or encryption requirements.....do I need a 3 by 3 matrix for data classification or a 4X4, a 5X5? nor do I understand where or when I can apply encryption.  If I carefully read the question,  I am PLANNING the Security mission.

 

I recommend that folks read every word, and not read meaning or anything into the questions.  I have too often seen people rush through the exam and fail

 

My nickel Canadian on a warm Monday (14 C or 57 F) here in Ontario.

 

Regards

 

Diana

 

 

Highlighted
Community Champion

Re: CISSP "sample" questions


@dcontesti wrote:

 

My nickel Canadian on a warm Monday (14 C or 57 F) here in Ontario.


Glad it's warmed up back there.  Out here there is actually snow in my front yard, and it's apparently going down to minus nine overnight ...

 

And thanks for jumping in on the policy question.  I was going to mention that you need to stick to the concepts, and that the concept here is that policy is high-level and abstract, and that protection details belong in the subordinate documents, but yours works, too  🙂

 

Oh, and a strong Amen! on reading the questions carefully ...


............
This message may or may not be governed by the terms of
http://www.noticebored.com/html/cisspforumfaq.html#Friday or
https://blogs.securiteam.com/index.php/archives/1468