Revision Questions

1. What is the most important factor to determine the appropriate levels of information asset protection?
   1. A vulnerability assessment of assets
   2. A feasibility study report
   3. Classification of assets
   4. Valuation of assets
2. Information asset classification helps to determine:
   1. The vulnerability of assets
   2. The impact of a compromise
   3. The value of assets
   4. The annual loss expectancy
3. What is the main reason for information asset classification?
   1. To maximize the utilization of resources
   2. To adhere to the IS policy
   3. To determine IT capability
   4. To determine the protection level
4. What is the most important factor to determine the classification of data?
   1. An assessment of impact by the data owner
   2. Requirements of the information security policy
   3. The existing level of protection
   4. An assessment of impact by the security manager
5. What is the most important factor in achieving proportionality in the protection of information assets?
   1. Classification of assets
   2. A vulnerability assessment
   3. Change management...