A project manager is leading an asset classification initiative. The team has identified all assets and categorized them. What is the next step in the process?

Label each asset with its classification level.

Select security controls for each asset.

Review the classification criteria.

An organization classifies its assets as 'Critical', 'Important', and 'Minor'. What is the primary impact of this classification on the organization's operations?

It specifies the exact software version the asset must run

It defines the physical location where the asset must be stored

It dictates the level of protection and recovery priority each asset receives

It determines the order in which assets are purchased

A company's data classification policy defines four levels: Public, Internal, Confidential, and Restricted. The policy also specifies that 'Confidential' data must be encrypted when stored on portable devices. A salesperson needs to take a laptop containing a customer list classified as Confidential on a business trip. What should the salesperson do?

Email the customer list to a personal email account for backup.

Ask the IT department to reclassify the data as Internal for the trip.

Remove the customer list from the laptop and carry it on a USB drive.

Ensure the laptop's hard drive is encrypted before traveling.

A security auditor is reviewing an organization's asset management practices. The auditor finds that the organization does not have a complete inventory of its IT assets. What is the most likely consequence of this gap?

The organization will automatically fail compliance audits.

The organization will not be able to purchase new hardware.

The organization will be unable to classify any data.

Some assets may not be classified or protected, leading to unmanaged risk.

Certified Information Systems Security Professional

Domain 2Objective 1

2.1 - Identify and Classify Information and Assets CISSP Practice Questions (Page 3)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

10%of the exam

Questions 11–15

11application · medium
A project manager is leading an asset classification initiative. The team has identified all assets and categorized them. What is the next step in the process?
Select an answer first
12foundation · easy
In a typical four-level data classification scheme, which classification level is intended for information that, if disclosed, could cause serious damage to the organization?
Select an answer first
13foundation · easy
An organization classifies its assets as 'Critical', 'Important', and 'Minor'. What is the primary impact of this classification on the organization's operations?
Select an answer first
14application · medium
A company's data classification policy defines four levels: Public, Internal, Confidential, and Restricted. The policy also specifies that 'Confidential' data must be encrypted when stored on portable devices. A salesperson needs to take a laptop containing a customer list classified as Confidential on a business trip. What should the salesperson do?
Select an answer first
15application · medium
A security auditor is reviewing an organization's asset management practices. The auditor finds that the organization does not have a complete inventory of its IT assets. What is the most likely consequence of this gap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.1 - Identify and Classify Information and Assets CISSP Practice Questions (Page 3)

Questions 11–15

A project manager is leading an asset classification initiative. The team has identified all assets and categorized them. What is the next step in the process?

In a typical four-level data classification scheme, which classification level is intended for information that, if disclosed, could cause serious damage to the organization?

An organization classifies its assets as 'Critical', 'Important', and 'Minor'. What is the primary impact of this classification on the organization's operations?

A security auditor is reviewing an organization's asset management practices. The auditor finds that the organization does not have a complete inventory of its IT assets. What is the most likely consequence of this gap?

Keep studying — Asset Security