A server is classified as a 'Critical' asset. Which of the following is the MOST likely handling requirement for this asset?

It should be restored before other assets in the event of a disaster

It should be backed up less frequently to save storage space

It can be disposed of without any special procedures

It should be accessible to all employees to ensure maximum utilization

Which of the following is an example of an asset that would be classified under asset classification but is NOT typically considered a data asset?

A proprietary software source code

A mid-sized company has grown rapidly and is unsure what hardware and software it owns. The security team wants to implement asset classification, but first needs to identify all assets. Which step should be performed first?

Define security controls for each asset classification level.

Assign a classification level to each asset based on its criticality.

Create a comprehensive asset inventory that lists all hardware, software, and data assets.

Label all assets with their classification level.

An organization classifies its data into four levels: Public, Internal, Confidential, and Restricted. The security team is designing baseline controls for each level. For data classified as 'Confidential', which control set is most appropriate?

Public posting on the company website.

No special controls beyond basic access controls.

Encryption at rest and in transit, and access restricted to authorized personnel on a need-to-know basis.

Certified Information Systems Security Professional

Domain 2Objective 1

2.1 - Identify and Classify Information and Assets CISSP Practice Questions (Page 7)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

10%of the exam

Questions 31–34

31foundation · easy
A server is classified as a 'Critical' asset. Which of the following is the MOST likely handling requirement for this asset?
Select an answer first
32foundation · easy
Which of the following is an example of an asset that would be classified under asset classification but is NOT typically considered a data asset?
Select an answer first
33application · medium
A mid-sized company has grown rapidly and is unsure what hardware and software it owns. The security team wants to implement asset classification, but first needs to identify all assets. Which step should be performed first?
Select an answer first
34application · medium
An organization classifies its data into four levels: Public, Internal, Confidential, and Restricted. The security team is designing baseline controls for each level. For data classified as 'Confidential', which control set is most appropriate?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.