Exam CISSP topic 1 question 370 discussion

C. While segregation can simplify infrastructure management, the primary reason for isolating different classes of information is not usually to simplify infrastructure, but rather to ensure compliance with legal requirements, particularly when those requirements vary by jurisdiction.

I don't love the question but I think they're aiming at D. Jurisdiction in this sense is about what regulations and laws apply to the information.

clasiffy info to apply different policies to each one and separate by user jurisdiction to avoid issues with different laws of each state or country

C. The organization's infrastructure is clearly arranged and scope of responsibility is simplified. Answer option C. encompasses D. which makes C. the best answer choice.

D. The key rationale is: +Isolating data and systems by jurisdiction allows an organization to tailor its policies and controls to meet the specific legal and regulatory requirements of that jurisdiction. +Laws and regulations often differ between countries/regions. Segregation allows localized compliance. +Other options about simplifying infrastructure or avoiding litigation may be benefits, but are not the primary driver.

I think answer is D, some applications are different in different countries, e.g. wechat, titok

agree on C

By structuring a system to isolate different classes of information from one another and segregating them by user jurisdiction, an organization can create a clear arrangement of its infrastructure, making it easier to manage and simplify the scope of responsibility. This can also help to prevent unauthorized access to sensitive information and reduce the risk of data breaches.

Given answer is correct