Assign Ownership and Responsibility for Each Asset. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of establishing a formal process for assigning asset ownership?

   • ATo ensure every asset has a clearly designated individual or role accountable for its protection.
   • BTo assign ownership only to assets that are currently connected to the network.
   • CTo allow any employee to claim ownership of any asset they use.
   • DTo replace the need for an asset inventory by relying on owner knowledge.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a key element of a formal asset ownership assignment process?

   • AAssigning ownership only when an asset is involved in a security incident.
   • BMaking ownership assignments permanent and never changing them.
   • CRequiring the asset owner to be the person who uses the asset daily.
   • DDocumenting the assignment and communicating it to the asset owner and relevant stakeholders.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services firm has assigned a data owner for its customer database. The data owner is unsure about their specific duties. Which duty is most clearly within the scope of an asset owner's responsibilities?

   • AConfiguring firewall rules to protect the database from external threats.
   • BEnsuring the database is included in the organization's risk assessment and that identified risks are mitigated.
   • CImplementing daily backup procedures for the database.
   • DPurchasing new hardware for the database server when needed.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which asset category would most likely require a formal ownership assignment under the NIST CSF?

   • AA printer in a break room used occasionally by employees for personal printing.
   • BA box of unused cables and adapters in a storage room.
   • CA legacy server that stores customer payment data and is no longer patched.
   • DA spare monitor stored in a supply closet and not connected to any network.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A hospital network has multiple facilities, each with its own IT staff. The central security office wants to ensure that asset ownership is consistent across all facilities. What is the best way to achieve consistency?

   • ACentralize all ownership decisions at the central security office.
   • BCreate a shared document that lists all assets and owners, but do not enforce a process.
   • CDevelop a standardized ownership framework that is implemented across all facilities, with local adaptation where necessary.
   • DAllow each facility to define its own ownership process, since they have different needs.
   Reveal Solution Discussion Select an answer first