Question
A business analyst is drafting a risk assessment.
Which of the following components should be included in the draft? (Choose two.)
- A. Asset management
- B. Database type
- C. Encryption algorithms
- D. Certificate name
- E. Asset inventory Correct
- F. Data classification Correct
Explanation
The Cloud Essentials+ objectives list asset inventory, classification and ownership as the components of a risk assessment: you first list what you have, then classify the data by sensitivity to judge the impact of a loss. Asset management is the ongoing process of maintaining assets over their life cycle, not a section of the assessment itself. Database type, encryption algorithms and certificate names are technical details, not risk assessment components.
