easyMultiple SelectObjective-mapped
CISA Practice Question: Which TWO of the following are primary objectives…
Which TWO of the following are primary objectives of information classification? (Choose two.)
⚠ Common exam trap
Test-takers frequently confuse the secondary benefits of classification (like improved storage management or network design) with its primary objectives, which are strictly about determining protection requirements and ensuring compliance.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Determine appropriate access controls and protection requirements.
Information classification is a foundational security process that assigns sensitivity labels (e.g., public, internal, confidential, restricted) to data assets. Its primary objectives are to determine the appropriate access controls and protection requirements for each classification level (Option B) and to ensure compliance with legal and regulatory requirements such as GDPR, HIPAA, or PCI DSS (Option D). These objectives directly drive the implementation of security controls like encryption, access control lists (ACLs), and data loss prevention (DLP) policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Simplify network architecture by segmenting data.
Why it's wrong here
Segmentation is a security control, not a direct objective of classification.
- ✓
Determine appropriate access controls and protection requirements.
Why this is correct
Classification helps define who needs access and what controls apply.
- ✗
Improve system performance by prioritizing critical data.
Why it's wrong here
Performance improvement is not a primary goal of classification.
- ✓
Ensure compliance with legal and regulatory requirements.
Why this is correct
Classification directly supports compliance by identifying sensitive data subject to regulations.
- ✗
Reduce storage costs by identifying duplicate data.
Why it's wrong here
Storage reduction is a potential side benefit but not a primary objective.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.