CompTIA CySA+ (CS0-002) — Question 139

Which of the following roles is ultimately responsible for determining the classification levels assigned to specific data sets?

Answer options

• A. Data custodian
• B. Data owner
• C. Data processor
• D. Senior management

Correct answer: B

Explanation

The Data owner is the correct answer because this role has the authority to classify data based on its sensitivity and importance. In contrast, the Data custodian manages data on behalf of the owner, the Data processor handles data processing tasks, and Senior management provides oversight but does not directly classify data.