Câu 81: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

Engineers at a company believe a certain type of data should be protected from competitors, but the data owner insists the information is not sensitive. An information security engineer is implementing controls to secure the corporate SAN. The controls require dividing data into four groups: non-sensitive, sensitive but accessible, sensitive but export-controlled, and extremely sensitive. Which of the following actions should the engineer take regarding the data?

1. A. Label the data as extremely sensitive.
2. B. Label the data as sensitive but accessible.
3. C. Label the data as non-sensitive. — đáp án hiện tại
4. D. Label the data as sensitive but export-controlled.