According to private sector data classification levels, how would salary levels and medical information be
classified?

What is surreptitious transfer of information from a higher classification compartment to a lower classification
compartment without going through the formal communication channels?

You have been tasked to develop an effective information classification program. Which one of the following
steps should be performed FIRST?

Which of the following would be the BEST criterion to consider in determining the classification of an
information asset?

Whose role is it to assign classification level to information?

Many approaches to Knowledge Discovery in Databases (KDD) are used to identify valid and useful patterns in
data. This is an evolving field of study that includes a variety of automated analysis solutions such as Data
Mining. Which of the following is not an approach used by KDD?

As per the Orange Book, what are two types of system assurance?

What are the components of an object’s sensitivity label?

What mechanism does a system use to compare the security labels of a subject and an object?

The Orange Book describes four hierarchical levels to categorize security systems. Which of the following
levels require mandatory protection?