Certified Information Systems Security Professional (CISSP) — Question 420

Physical assets defined in an organization's business impact analysis (BIA) could include which of the following?

Answer options

• A. Personal belongings of organizational staff members
• B. Disaster recovery (DR) line-item revenues
• C. Cloud-based applications
• D. Supplies kept off-site a remote facility

Correct answer: D

Explanation

The correct answer, D, refers to supplies maintained at a remote facility, which are indeed physical assets as defined in a BIA. Options A, B, and C do not qualify as physical assets; A pertains to personal property, B to financial aspects, and C to software applications, which are intangible.