CISSP Practice Question (Domain 2: Asset Security)
A marketing team wants three years of customer support transcripts in an overseas AI analytics tool by month end. The transcripts were never classified and have no named owner. What should the security manager do FIRST?
A. Approve the upload once the transcripts are anonymized
B. Assign a data owner and classify the transcripts
C. Require the provider to sign a data processing agreement
D. Limit the upload to transcripts older than one year
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
2
14 comments
Vincent Primiani
7
CISSP Practice Question (Domain 2: Asset Security)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by