Assets and Their Corresponding Protection Level CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security team must prioritize protection for a hospital's assets: patient records (high value, high exposure), medical equipment (high value, low exposure), and staff schedules (low value, low exposure). The budget is limited. Which asset should be protected first?

   • AMedical equipment, because it has high value and is critical for patient care.
   • BAll three equally, because they are all important to the hospital.
   • CStaff schedules, because they are easiest to protect.
   • DPatient records, because they have both high value and high exposure, making them the highest risk.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   An organization is valuing its customer database. Which of the following best illustrates a high asset value?

   • AThe database is backed up daily to an offsite location
   • BThe database contains sensitive personal data and its loss would cause regulatory fines and loss of customer trust
   • CThe database is stored on a server with 99.9% uptime
   • DThe database is accessed by only five employees
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has classified its financial reports as 'medium protection' and its employee contact list as 'low protection'. Which control mapping is most appropriate?

   • ABoth financial reports and employee contacts require the same level of encryption.
   • BFinancial reports require no controls because they are internal; employee contacts require encryption.
   • CFinancial reports require multi-factor authentication; employee contacts require password protection.
   • DFinancial reports require password protection and restricted access; employee contacts require no special controls.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the purpose of mapping security controls to asset protection levels?

   • ATo eliminate the need for risk assessments by applying the strongest controls to every asset
   • BTo ensure that all assets receive the same level of security regardless of their value
   • CTo ensure that the safeguards applied are proportional to the asset's importance and sensitivity
   • DTo document all security controls in a single repository for compliance purposes
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is valuing its assets. The sales database generates $1M in revenue per month, the internal wiki is used by 10 employees, and the CEO's laptop contains strategic plans. Which asset should be valued highest?

   • AThe sales database, because its loss would directly stop revenue generation.
   • BThe internal wiki, because it is used by employees daily.
   • CThe CEO's laptop, because it contains strategic plans.
   • DAll three have equal value because they are all company assets.
   Reveal Solution Discussion Select an answer first