Assets and Their Corresponding Protection Level CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is valuing its assets after a security incident. The incident response plan (IRP) helped minimize damage, the customer database was compromised, and the backup server was unaffected. Which asset should be valued highest?

   • AAll three assets have equal value because they all contributed to the incident response.
   • BThe incident response plan, because it minimized damage.
   • CThe backup server, because it was unaffected and provides recovery capability.
   • DThe customer database, because its compromise caused direct harm and regulatory impact.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When assessing the value of an asset, which factor is most directly considered?

   • AThe impact on the organization if the asset is lost or compromised
   • BThe cost of the hardware on which the asset runs
   • CThe number of users who access the asset daily
   • DThe age of the asset since its deployment
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A software company has limited security budget and must protect several assets: source code (high value, low exposure), customer data (high value, high exposure), and internal wiki (low value, low exposure). Which prioritization reflects a risk-based approach?

   • ADistribute the budget equally across all three assets.
   • BPrioritize the wiki first because it is easiest to secure.
   • CPrioritize customer data first, then source code, then the wiki.
   • DPrioritize source code first because it is the company's intellectual property.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team must protect three assets with a limited budget: a legacy customer database (high value, high exposure, but expensive to secure), a new internal tool (medium value, low exposure, cheap to secure), and a public website (low value, high exposure, moderate cost to secure). Which approach best applies risk-based protection?

   • ASecure the public website first because it has high exposure, then the database, then the tool.
   • BSecure the internal tool first because it is cheap, then the website, then the database.
   • CSecure all three equally to ensure no asset is neglected.
   • DSecure the customer database first, then the public website, then the internal tool.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary goal of a risk-based approach to asset protection?

   • ATo eliminate all risks by applying the maximum security controls to every asset
   • BTo prioritize protection efforts on assets with the highest exposure and criticality
   • CTo protect all assets equally to avoid any risk of loss
   • DTo focus only on assets that are easy to protect, regardless of their value
   Reveal Solution Discussion Select an answer first