Which statement defines a Minor application?

• A. An application, other than a major application, that requires attention to security due to the risk and magnitude of harm from loss, misuse, or unauthorized access or modification; typically included as part of a general support system.
• B. A mission-critical system with strict uptime requirements.
• C. A public-facing website used for marketing.
• D. A personal mobile app not connected to enterprise resources.

Answer: (A)

The idea being tested is how to classify applications by risk and importance for security in a government or agency context. A Minor application is defined as one that isn’t a major system but still needs security attention because of the potential harm from loss, misuse, or unauthorized access or modification, and it’s typically considered part of the general support system. This makes the statement correct because it matches both criteria: not a major, mission-critical system, yet still requiring security due to risk and being grouped under the general support framework.

The other descriptions describe systems that don’t fit that specific pairing: a mission-critical system would be categorized as major due to its uptime and importance; a public-facing marketing site or a personal app outside enterprise resources isn’t described as part of the general support system, so they don’t align with the definition of a Minor application as given.