CRISC Information Technology and Security Practice Question
Which enterprise architecture layer is most directly responsible for managing the storage and processing of data, and for which data classification and encryption controls are critical?
⚠ Common exam trap
It's easy for candidates to confuse data architecture with technology architecture, mistakenly thinking that hardware or infrastructure layers are responsible for data classification and encryption, when in fact these controls are defined and managed at the data layer itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data architecture
Data architecture is the enterprise architecture layer that defines how data is stored, managed, and processed, including data models, data flows, and storage structures. Data classification and encryption controls are critical at this layer because they directly protect the confidentiality and integrity of data at rest and in transit, ensuring compliance with policies and regulations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Application architecture
Why it's wrong here
Application architecture deals with software applications, not the data layer itself.
- ✓
Data architecture
Why this is correct
Correct. Data architecture manages data assets and requires data protection controls.
- ✗
Technology architecture
Why it's wrong here
Technology architecture includes infrastructure, but data architecture is specific to data.
- ✗
Business architecture
Why it's wrong here
Business architecture focuses on strategy and processes, not data management.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.