CDS Data Classification & Categorization 1 — Questions and Answers
Question 1: What is the primary purpose of data classification in data stewardship?
- To organize data assets by their creation date
- To assign sensitivity levels and categories to data assets for proper handling (Correct answer)
- To duplicate data across multiple backup systems
- To delete obsolete data records on a schedule
Correct answer: To assign sensitivity levels and categories to data assets for proper handling
Data classification assigns sensitivity levels and categories to data assets so they can be protected, managed, and handled in accordance with governance policies.
Question 2: Which classification level typically applies to data that can be freely shared with the general public?
- Confidential
- Internal Use Only
- Public (Correct answer)
- Restricted
Correct answer: Public
Public classification applies to data that can be disclosed without restrictions because its release poses no risk or harm to the organization.
Question 3: What term describes a hierarchical arrangement of categories used to systematically organize data?
- Data dictionary
- Data taxonomy (Correct answer)
- Data lineage
- Data provenance
Correct answer: Data taxonomy
A data taxonomy is a hierarchical classification system that organizes data into structured categories and subcategories, similar to how biological species are classified.
Question 4: In data sensitivity classification, what does PII stand for?
- Private Information Index
- Personally Identifiable Information (Correct answer)
- Protected Internal Infrastructure
- Primary Identification Input
Correct answer: Personally Identifiable Information
PII stands for Personally Identifiable Information, which is any data that can be used to identify a specific individual, such as name, Social Security number, or email address.
Question 5: Which approach to data classification uses automated scanning tools that inspect content and assign categories based on predefined patterns or keywords?
- User-driven classification
- Content-based classification (Correct answer)
- Policy-only classification
- Manual classification
Correct answer: Content-based classification
Content-based classification uses automated tools to scan data content and apply category labels based on pattern matching, keywords, or regular expressions found within the data itself.
Question 6: What is a data dictionary's primary function in the context of data classification?
- A tool for removing duplicate records from databases
- A centralized repository documenting data elements, their definitions, and associated attributes (Correct answer)
- A network protocol specification for data transmission
- A physical reference book for data backup procedures
Correct answer: A centralized repository documenting data elements, their definitions, and associated attributes
A data dictionary is a centralized repository that documents data elements, their definitions, formats, relationships, and metadata to support consistent data understanding and governance.
Question 7: Which of the following best describes a sensitivity classification scheme in enterprise data governance?
- A method for encrypting all data at rest using standard algorithms
- A framework that assigns protection levels based on potential harm from unauthorized disclosure (Correct answer)
- A system for archiving and purging old data records automatically
- A process for converting unstructured data into structured database records
Correct answer: A framework that assigns protection levels based on potential harm from unauthorized disclosure
A sensitivity classification scheme is a governance framework that assigns tiered protection levels (e.g., Public, Internal, Confidential, Restricted) based on the potential harm if data is improperly disclosed.
What is the primary purpose of data classification in data stewardship?