Courseiva
Information Technology and SecurityhardMultiple ChoiceObjective-mapped

CRISC Information Technology and Security Practice Question

An organization is reviewing its enterprise architecture to identify risks. In which IT architecture layer would a risk related to data classification and data sovereignty be primarily addressed?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Data architecture layer

Data classification and sovereignty concerns are primarily data-related, falling under the data architecture layer. The data layer defines how data is stored, classified, and managed, including sovereignty requirements.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Application architecture layer

    Why it's wrong here

    Application layer deals with software components, not data governance.

  • Business architecture layer

    Why it's wrong here

    Business architecture focuses on processes and strategy, not data specifics.

  • Data architecture layer

    Why this is correct

    Correct. Data architecture addresses data classification, storage, and sovereignty.

  • Infrastructure/Technology architecture layer

    Why it's wrong here

    Infrastructure layer deals with hardware and networking, not data classification.

About these practice questions

This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.