ITPEC IP April 2020 Question 37
ITPEC IP April 2020 — Question 37 of 100
Asset A has the highest risk value. Multiplying asset value, threat, and vulnerability gives A = 5×2×3 = 30, B = 6×1×2 = 12, C = 2×2×5 = 20, and D = 1×5×3 = 15. Therefore A receives the highest priority.
Answer (a)
Why not others:
- B, C, and D all have products below 30
- a single high factor is insufficient when the specified method multiplies all three factors
Key rule: Apply the stated risk formula consistently to every asset, then prioritize the largest resulting risk value.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.