CompTIA CySA+ (CS0-002) — Question 362

An organization is focused on restructuring its data governance programs, and an analyst has been tasked with surveying sensitive data within the organization.
Which of the following is the MOST accurate method for the security analyst to complete this assignment?

Answer options

• A. Perform an enterprise-wide discovery scan.
• B. Consult with an internal data custodian.
• C. Review enterprise-wide asset inventory.
• D. Create a survey and distribute it to data owners.

Correct answer: D

Explanation

Creating a survey and distributing it to data owners is the most accurate method because it allows the analyst to gather specific insights directly from those who manage the data. Other options, while useful, may not yield as detailed or accurate information regarding sensitive data as direct input from data owners.