6.2 Understand Target Systems (asset Inventory and Who Would Target Those Assets) CCFH Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A regional hospital maintains a public patient portal, an internal EHR system, and a research database containing de-identified genomic data. The security team has limited hunting resources and must prioritize monitoring. Which asset should be the primary focus for hunting activities, considering both value and exposure?

   • AThe internal EHR system, because it contains the most sensitive personal health information and is the primary target for financially motivated actors seeking ransom or data theft.
   • BThe public patient portal, because it is internet-facing and has the highest exposure to external attackers.
   • CAll three assets equally, because any asset could be targeted and hunting should cover the entire attack surface.
   • DThe research database, because de-identified genomic data is the most valuable asset for nation-state espionage.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which combination of factors makes an asset an attractive target for threat actors?

   • ALow value, high exposure, and high impact
   • BHigh value, low exposure, and low impact
   • CHigh value, high exposure, and high potential impact
   • DLow value, low exposure, and low impact
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Why is an internet-facing application server with customer payment data more likely to be targeted than an internal file server with no sensitive data?

   • AThe application server has higher exposure and contains high-value data, making it a more attractive target
   • BThe internal file server is more valuable to the business
   • CThe application server is easier to compromise because it is internal
   • DThe internal file server has higher potential impact due to its location
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which asset-to-actor mapping is most accurate for a hunting hypothesis?

   • ACybercriminals targeting a domain controller to steal source code
   • BInsiders targeting a financial reporting system to commit fraud
   • CHacktivists targeting a customer database to sell PII
   • DNation-state actors targeting a public web server to deface the website
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A utility company is building an asset inventory. They have a customer billing system, a SCADA system that controls the power grid, and a public website. The security team must prioritize hunting for a nation-state actor. Which asset is most critical to protect from this specific threat?

   • AThe SCADA system, because its compromise could disrupt the power grid and cause widespread physical and economic damage.
   • BAll assets are equally critical because they are all part of the national infrastructure.
   • CThe public website, because it is the most exposed.
   • DThe customer billing system, because it contains financial data and PII.
   Reveal Solution Discussion Select an answer first