Identify and Inventory All Assets and Categorize Them Based on Their Criticality and Sensitivity. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A manufacturing company is assessing the criticality of its assets. The assembly line robots are essential for production, the inventory management system tracks raw materials, and the employee time-tracking system records hours worked. Which asset is the most critical?

   • AAll are equally critical because they are all part of the company
   • BAssembly line robots
   • CInventory management system
   • DEmployee time-tracking system
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A university is assessing the sensitivity of its assets. The registrar's office maintains student transcripts, the research lab stores unpublished patent data, and the public website hosts course catalogs. Which asset should be classified as having the highest sensitivity?

   • AStudent transcripts, because they are protected by privacy regulations
   • BAll assets have the same sensitivity because they are all part of the university
   • CUnpublished patent data, because its disclosure could cause significant financial and reputational harm
   • DPublic course catalogs, because they are accessed by many users
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A hospital is updating its asset inventory. The inventory currently lists all medical devices, but it does not include the vendor service accounts that can remotely access those devices for maintenance. Why is it important to include these service accounts in the inventory?

   • ATo ensure the inventory is complete and includes all types of assets, including human and digital accounts
   • BTo comply with vendor licensing agreements
   • CTo ensure that only authorized personnel can access the network
   • DTo reduce the number of devices that need to be monitored
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A hospital is prioritizing its assets for a cybersecurity improvement project. The electronic health record (EHR) system is critical for patient care and contains highly sensitive patient data. The MRI machines are critical for diagnostics but do not store patient data. The staff scheduling system is important for operations but contains only employee schedules. The hospital has a limited budget and must choose which asset to protect first. Which asset should be the top priority?

   • AStaff scheduling system
   • BEHR system
   • CAll should be protected equally
   • DMRI machines
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following assets would most likely be assessed as having HIGH sensitivity?

   • AA database containing customer payment card information
   • BA public marketing brochure
   • CAn internal employee directory with names and job titles
   • DA company-wide announcement about a new product launch
   Reveal Solution Discussion Select an answer first