6.2 Understand Target Systems (asset Inventory and Who Would Target Those Assets) CCFH Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A small e-commerce company has a website with a customer database and a separate server for internal financial reporting. The website is frequently scanned by automated tools. Which asset is most likely to be targeted by a cybercriminal for direct financial gain?

   • AThe company's social media accounts, because they could be used to spread malware.
   • BThe website's front-end code, because it could be modified to redirect customers to malicious sites.
   • CThe customer database, because it contains payment card information and personal data that can be sold or used for fraud.
   • DThe internal financial reporting server, because it contains aggregated financial data.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A company has two assets: a public web server that hosts marketing content and an internal HR database containing employee records. According to asset criticality, which asset should receive higher-priority hunting attention?

   • AThe public web server, because it is exposed to the internet
   • BThe internal HR database, because it contains sensitive employee data and its compromise would have significant regulatory and privacy impact
   • CThe public web server, because it is easier to compromise
   • DBoth should receive equal priority because all assets are equally important
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A threat actor is exfiltrating sensitive research data to a foreign government. Which threat actor category best matches this behavior?

   • AInsiders
   • BNation-state actors
   • CCybercriminals
   • DHacktivists
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security analyst is building an asset inventory to support threat hunting. Which item is an example of a 'data' asset?

   • AA VPN gateway appliance
   • BA customer database containing personally identifiable information (PII)
   • CA privileged user account used by IT administrators
   • DA domain controller running Windows Server
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A financial services firm is building its asset inventory. They have identified a legacy application that processes wire transfers, a development server with no production data, and a public marketing website. The security team must prioritize which asset to monitor most closely. Which asset should be considered the highest criticality?

   • AThe development server, because it may contain source code that could be used to find vulnerabilities in production systems.
   • BAll assets have equal criticality because they are all part of the network.
   • CThe public marketing website, because it is the most exposed to the internet.
   • DThe legacy wire transfer application, because it directly handles high-value financial transactions and its age may introduce unpatched vulnerabilities.
   Reveal Solution Discussion Select an answer first