A small business has a network with several servers, workstations, and network devices. The owner wants to create an asset inventory to help with insurance and security planning. Which of the following is the most important attribute to record for each asset?

The asset's warranty expiration date

The purchase price of the asset

A company is decommissioning a legacy application that contains sensitive customer data. The data must be retained for a certain period to comply with legal requirements, but the application is no longer supported. The company plans to archive the data in a secure format. Which of the following is the most important consideration when archiving the data?

Ensuring that the archived data is encrypted and access is restricted to authorized personnel

Converting the data to a format that is readable by a modern application

Storing the data on a separate server that is not connected to the network

Deleting the data after the retention period expires

A multinational corporation is subject to the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). The company stores personal data of EU and California residents in a cloud environment. The data is processed by a third-party vendor. The company's legal team is concerned about compliance with both regulations. Which of the following is the most important consideration when provisioning access to this data?

Conducting a privacy impact assessment (PIA) for the data processing activity

Implementing role-based access control (RBAC) to limit access to the data

Storing the data in a data center located within the EU to satisfy GDPR requirements

Ensuring that the third-party vendor has signed a data processing agreement (DPA) that includes GDPR and CCPA requirements

A company is planning to migrate its on-premises data center to the cloud. The security team needs to ensure that all assets are accounted for during the migration. Which of the following is the most important action to take before starting the migration?

Purchase additional cloud capacity to handle the migration

Notify all employees of the migration date

Hire a cloud migration consultant

Create a complete inventory of all assets, including data, applications, and infrastructure

Certified Information Systems Security Professional

Domain 2Objective 3

2.3 - Provision Information and Assets Securely CISSP Practice Questions (Page 1)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

3concepts

10%of the exam

Questions 1–5

1application · medium
A small business has a network with several servers, workstations, and network devices. The owner wants to create an asset inventory to help with insurance and security planning. Which of the following is the most important attribute to record for each asset?
Select an answer first
2expert · hard
A company is decommissioning a legacy application that contains sensitive customer data. The data must be retained for a certain period to comply with legal requirements, but the application is no longer supported. The company plans to archive the data in a secure format. Which of the following is the most important consideration when archiving the data?
Select an answer first
3expert · hard
A multinational corporation is subject to the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). The company stores personal data of EU and California residents in a cloud environment. The data is processed by a third-party vendor. The company's legal team is concerned about compliance with both regulations. Which of the following is the most important consideration when provisioning access to this data?
Select an answer first
4application · medium
A company is planning to migrate its on-premises data center to the cloud. The security team needs to ensure that all assets are accounted for during the migration. Which of the following is the most important action to take before starting the migration?
Select an answer first
5foundation · easy
Which role is responsible for implementing the technical and physical controls that protect an information asset on behalf of the asset owner?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

2.3 - Provision Information and Assets Securely CISSP Practice Questions (Page 1)

Questions 1–5

A small business has a network with several servers, workstations, and network devices. The owner wants to create an asset inventory to help with insurance and security planning. Which of the following is the most important attribute to record for each asset?

A company is planning to migrate its on-premises data center to the cloud. The security team needs to ensure that all assets are accounted for during the migration. Which of the following is the most important action to take before starting the migration?

Which role is responsible for implementing the technical and physical controls that protect an information asset on behalf of the asset owner?

Keep studying — Asset Security