Assets and Their Corresponding Protection Level CT-STE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has classified its intellectual property (IP) as 'high protection' and its public press releases as 'low protection'. Which control mapping is most appropriate?

   • AIP requires encryption at rest and in transit, with role-based access; press releases require no special controls.
   • BIP requires no controls because it is stored internally; press releases require encryption because they are public.
   • CIP requires a simple password; press releases require encryption to prevent leaks.
   • DBoth IP and press releases require the same encryption and access controls.
   Reveal Solution Discussion Select an answer first
2. 7application · medium · select all that apply

   A security tester is identifying assets for a financial institution. Which of the following are correctly categorized as assets? (Select all that apply.)

   • AThe transaction processing system (software).
   • BThe bank's ATMs (hardware).
   • CThe bank's brand reputation (intangible).
   • DThe bank's customer data (data).
   • EThe bank's security officers (personnel).
   Check answers Discussion Select an answer first
4. 8application · medium

   A government agency must classify a document containing citizen tax records. The document is subject to strict data-protection regulations. Which protection level is most appropriate?

   • AHigh protection, with encryption, strict access control, and audit logging.
   • BMedium protection, with password protection but no encryption.
   • CNo protection, because it is not publicly accessible.
   • DLow protection, because it is internal government data.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A manufacturing company is assessing the value of its assets. The production control system (PCS) directly controls assembly lines; the HR payroll database contains employee records; the office coffee machine is internet-connected. Which asset should be valued highest?

   • AThe production control system, because its loss would halt manufacturing and cause significant revenue loss.
   • BThe HR payroll database, because it contains sensitive personal data.
   • CThe coffee machine, because it is internet-connected and could be a security risk.
   • DAll three assets have equal value because they are all part of the organization.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   A company stores both public marketing brochures and confidential financial reports. How should the protection levels for these two assets differ?

   • ABoth should have the same protection level because they are both data assets
   • BThe brochures should have a higher protection level because they are more widely distributed
   • CThe brochures should have a higher protection level because they are publicly accessible
   • DThe financial reports should have a higher protection level due to their sensitivity and value
   Reveal Solution Discussion Select an answer first