Identify and Inventory All Assets and Categorize Them Based on Their Criticality and Sensitivity. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a key characteristic of an effective asset inventory?

   • AIt is maintained and kept current to reflect changes in the environment
   • BIt is stored in a single spreadsheet that is accessible to all employees
   • CIt is updated only during annual audits
   • DIt includes only hardware and software assets
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services firm maintains an asset inventory in a spreadsheet that is updated only during annual audits. Recently, a new cloud-based customer relationship management (CRM) system was deployed by the sales department without IT's knowledge. What is the most effective way to improve the accuracy of the inventory?

   • ADeploy an automated discovery tool that scans the network and integrates with cloud service providers
   • BMove the inventory to a shared drive so all employees can update it
   • CRequire all departments to submit asset changes to IT on a monthly basis
   • DConduct a more comprehensive annual audit that includes interviews with department heads
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A consulting firm is assessing the sensitivity of its client data. The client contracts contain commercial terms, the client financial statements contain sensitive financial information, and the marketing brochures are public. Which asset has the highest sensitivity?

   • AClient financial statements
   • BAll have the same sensitivity because they are all client-related
   • CMarketing brochures
   • DClient contracts
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A law firm is classifying its data assets. The case management system contains confidential client communications, the marketing website is public, and the internal HR system contains employee performance reviews. Which asset has the highest sensitivity?

   • AAll have the same sensitivity because they are all internal
   • BMarketing website
   • CHR system
   • DCase management system
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of asset prioritization in the NIST Cybersecurity Framework?

   • ATo determine the order in which assets should be replaced
   • BTo identify which assets are most vulnerable to cyber attacks
   • CTo assign a unique identifier to each asset for tracking purposes
   • DTo rank assets based on their combined criticality and sensitivity to guide resource allocation
   Reveal Solution Discussion Select an answer first