A manufacturing company is categorizing its assets for the NIST Identify function. The production line control system is essential for daily operations, but a failure would not cause a data breach. The HR database contains sensitive employee data but is not critical for daily production. Which asset should be given the highest priority for protection?

The production line control system, because its loss would halt operations

The asset with the highest combined criticality and sensitivity

The HR database, because it contains sensitive personal data

Both assets should receive equal priority because they are both important

Which of the following is an example of a human asset in the context of asset identification?

A proprietary software application

Which of the following is an example of categorizing an asset by its role?

Classifying an application as 'production'

Classifying a laptop as 'employee-owned'

Classifying a server as 'hardware'

Classifying a database as 'customer data'

A university is building an asset inventory. Which of the following should be included as assets in the inventory? (Select all that apply.)

The university's brand reputation

What does sensitivity assessment primarily evaluate about an asset?

The asset's importance to the organization's mission

The likelihood of the asset being attacked

The cost of the asset in the market

The impact of the asset's compromise on confidentiality, integrity, or availability

Dell NIST Cybersecurity Framework v2.0

Domain 3Objective 2

Identify and Inventory All Assets and Categorize Them Based on Their Criticality and Sensitivity. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Part of the NIST Framework: IDENTITY Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

29questions here

6free pages

6concepts

18%of the exam

Questions 21–25

21application · medium
A manufacturing company is categorizing its assets for the NIST Identify function. The production line control system is essential for daily operations, but a failure would not cause a data breach. The HR database contains sensitive employee data but is not critical for daily production. Which asset should be given the highest priority for protection?
Select an answer first
22foundation · easy
Which of the following is an example of a human asset in the context of asset identification?
Select an answer first
23foundation · easy
Which of the following is an example of categorizing an asset by its role?
Select an answer first
24expert · medium · select all that apply
A university is building an asset inventory. Which of the following should be included as assets in the inventory? (Select all that apply.)
Select an answer first
25foundation · easy
What does sensitivity assessment primarily evaluate about an asset?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.