CDS Data Classification & Categorization 2 — Questions and Answers
Question 1: What distinguishes a data ontology from a data taxonomy?
- An ontology is simpler and contains fewer categories than a taxonomy
- An ontology defines complex semantic relationships between concepts, not just hierarchical structure (Correct answer)
- A taxonomy includes machine-readable inference rules while an ontology does not
- They are identical terms used interchangeably in data governance
Correct answer: An ontology defines complex semantic relationships between concepts, not just hierarchical structure
An ontology defines complex semantic relationships, properties, and constraints between concepts, going beyond taxonomy's simple parent-child hierarchy to represent richer, interconnected knowledge.
Question 2: In enterprise data governance, what does a business glossary primarily provide?
- Technical specifications and schemas for database design
- Standardized business definitions and context for data terms across the organization (Correct answer)
- Step-by-step instructions for data backup and recovery procedures
- A vendor-approved list of licensed software applications
Correct answer: Standardized business definitions and context for data terms across the organization
A business glossary provides standardized, business-context definitions for data terms, ensuring consistent understanding and usage of terminology across different departments and systems.
Question 3: Which classification category typically applies to an organization's unreleased financial projections and strategic acquisition plans?
- Public
- Internal Use Only
- Confidential (Correct answer)
- Unclassified
Correct answer: Confidential
Confidential classification applies to sensitive business information such as financial projections and strategic plans whose disclosure could cause significant harm to the organization or its competitive position.
Question 4: What is a data classification matrix used for in data governance?
- To map database tables to corresponding application modules
- To cross-reference data categories with their required handling procedures and access controls (Correct answer)
- To schedule and track data migration tasks across systems
- To log and monitor data entry errors in transactional systems
Correct answer: To cross-reference data categories with their required handling procedures and access controls
A data classification matrix cross-references data types or sensitivity levels with the specific handling procedures, access controls, retention rules, and encryption requirements applicable to each category.
Question 5: Which classification technique assigns labels to data based on the source system, user role, or business process context rather than analyzing the data content itself?
- Content-based classification
- Context-based classification (Correct answer)
- Schema-based classification
- Keyword-based classification
Correct answer: Context-based classification
Context-based classification assigns data labels based on contextual factors such as the originating application, user role, or business process, without inspecting the actual data values.
Question 6: ISO/IEC 27001 is most relevant to data classification because it:
- Specifies indexing and query optimization requirements for databases
- Provides a framework for information security management that includes data classification requirements (Correct answer)
- Defines standard protocols for secure data transmission over networks
- Establishes normalization rules for relational database design
Correct answer: Provides a framework for information security management that includes data classification requirements
ISO/IEC 27001 is the international standard for information security management systems (ISMS), which includes Annex A controls requiring organizations to classify information by its value, sensitivity, and criticality.
Question 7: What is the primary ongoing responsibility of data stewards regarding a classification scheme?
- Stewards handle only technical database administration tasks
- Stewards define, enforce, and periodically review classification policies and ensure data assets are correctly labeled (Correct answer)
- Stewards are solely responsible for data backup and disaster recovery
- Stewards only approve IT infrastructure and hardware purchases
Correct answer: Stewards define, enforce, and periodically review classification policies and ensure data assets are correctly labeled
Data stewards are responsible for defining classification policies, verifying data assets carry accurate labels, and conducting periodic reviews to ensure the classification scheme remains current and properly applied.
CDS Data Classification & Categorization 2
What distinguishes a data ontology from a data taxonomy?