Lecture 4-2

Question 1

What is the recommended time frame for conducting vulnerability assessments?

Answer 1

Critical assets: every 6 months
Non-critical assets: every 1 year

Question 2

A Vulnerability Assessment test plan: Name the first 5 sections.

Answer 2

• Overview
• Purpose
• Regulations/Laws/Standards
• Scope
• Type of test

Question 3

A Vulnerability Assessment test plan: Name the second 4 sections.

Answer 3

• Timeline and tasks
• Rule of engagement
• Stakeholders list
• Liabilities

Question 4

What is Data Governance (DG)?

Answer 4

The process of managing information over its life cycle from creation to destruction

Question 5

List the levels of data classification used in our lab (5).

Answer 5

• Public Data
• Private Data
• Restricted Data
• Sensitive Data
• Top Secret Data

Question 6

True or False: Non-critical assets are always ignored in vulnerability assessments.

Answer 6

False