A project manager is responsible for a new application that will be deployed. According to asset management best practices, what should be defined before the application goes live?

A list of all possible security vulnerabilities in the application.

An asset owner who is accountable for the application's security and lifecycle decisions.

A backup plan for the application's data.

A decommissioning date for the application.

A company is assessing the risk of a cyberattack on their customer-facing web application. They need to understand which backend systems the application depends on. What should they do first?

Check the web application's uptime statistics.

Conduct a vulnerability scan on the web application.

Map the data flows and dependencies from the web application to backend systems.

Review the web application's source code for security flaws.

A company is decommissioning a server that stored sensitive customer data. What is the most important step to include in the decommissioning process?

Securely erase or destroy the storage media and verify that no data remains.

Transfer the asset to another department for reuse without further action.

Notify the asset owner and ask them to delete the data manually.

Remove the asset from the CMDB immediately after powering it off.

An organization needs to automatically discover all devices connected to its network and add them to its asset inventory. Which type of tool is most appropriate for this task?

Identity and access management (IAM) tool

Data loss prevention (DLP) tool

Dell NIST Cybersecurity Framework v2.0

Domain 3Objective 4

List the Tools and Techniques Used in Asset Management. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Part of the NIST Framework: IDENTITY Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

32questions here

7free pages

7concepts

18%of the exam

Questions 6–10

6application · medium
A project manager is responsible for a new application that will be deployed. According to asset management best practices, what should be defined before the application goes live?
Select an answer first
7foundation · easy
An organization purchases new laptops for employees. In which asset lifecycle phase is the organization currently operating?
Select an answer first
8application · medium
A company is assessing the risk of a cyberattack on their customer-facing web application. They need to understand which backend systems the application depends on. What should they do first?
Select an answer first
9application · medium
A company is decommissioning a server that stored sensitive customer data. What is the most important step to include in the decommissioning process?
Select an answer first
10foundation · easy
An organization needs to automatically discover all devices connected to its network and add them to its asset inventory. Which type of tool is most appropriate for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.