Great News!
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
Many students who study using our platform have reported that a large number of the practice questions here are very similar to those that appear in real exams. View Courses
A business analyst is drafting a risk assessment. Which of the following components should be included in the draft? (Choose two.)
Correct Answers: A. Asset management and F. Data classification
Asset management involves identifying, tracking, and managing the assets that are critical to an organization's operations, including hardware, software, data, and systems. It is essential in a risk assessment to understand what assets exist, their importance, and their vulnerabilities.
Data classification involves categorizing data based on its sensitivity, importance, and the level of protection it requires (e.g., public, confidential, highly confidential). It helps prioritize risks and determine the necessary security controls.
Why the Other Options Are Incorrect:
While knowing the database type (e.g., SQL, NoSQL) may be relevant for system design or security implementation, it is not a critical component of a risk assessment, which focuses on assets, risks, and impacts.
Encryption algorithms are a technical detail of how data is protected, not a component of a risk assessment. Risk assessments focus on identifying and evaluating risks, not specifying implementation details.
Certificate names are specific to authentication and encryption mechanisms. While certificates are part of securing systems, their specific names are irrelevant in a broad risk assessment.
While related to asset management, an asset inventory is a detailed list of assets and is a subset of asset management. Asset management includes not just listing assets but also evaluating their value and importance, making it the more comprehensive and relevant choice.
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams
