Fatima, an IT security manager, is assessing the company's assets to identify their risk levels. She learns that some assets should be considered medium-risk. Which assets can Fatima classify as medium-risk? Select two answers. The company's financial documentation and records The extensive database of sensitive customer records The mission-critical e-commerce platform applications The internal guidelines and policy documents The collection of non-copyrighted images used for marketing materials