Asset evaluation question.

45 views
Skip to first unread message

VT

unread,
Aug 2, 2018, 9:06:14 PM8/2/18
to CISSP Study Mailing List
Which of the following is not a useful item to consider when establishing the value of an asset?

A. Development cost

B. Intellectual property or equity value

C. Liability of asset loss

D. Classification level

Anil Kumar K

unread,
Aug 2, 2018, 11:00:59 PM8/2/18
to cissp...@googlegroups.com
Development cost


From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of VT <mgr...@gmail.com>
Sent: Friday, August 3, 2018 6:36:14 AM
To: CISSP Study Mailing List
Subject: [CCCure_CISSP_Talks] Asset evaluation question.
 
--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.
To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/b25bcf76-3f64-453a-98ed-5c689e186884%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Venky T

unread,
Aug 3, 2018, 3:37:06 PM8/3/18
to cissp...@googlegroups.com
I answered that option too, but I got that wrong which I couldnt understand why, but according to that explanation the correct answer is "D". I saw the below mentioned explanation.

Classification level is assigned based on an asset’s value as well as its sensitivity and confidentiality. It is not used as a valuation element.

I think its "A" is the right answer. 

Anyone else can provide some feedback, much appreciated. 
-- Venky.T.


Anil Kumar K

unread,
Aug 3, 2018, 11:47:25 PM8/3/18
to cissp...@googlegroups.com
One may develop a product for $1000 and may be its value is only $100 to Company.
Classification gives the important value that asset hold and prioritise things.

Use only verified test banks.


From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of Venky T <mgr...@gmail.com>
Sent: Saturday, August 4, 2018 1:06:54 AM
To: cissp...@googlegroups.com
Subject: Re: [CCCure_CISSP_Talks] Asset evaluation question.
 

Uday Kiran

unread,
Aug 4, 2018, 1:29:17 AM8/4/18
to cissp...@googlegroups.com
I have not scrolled down until I fixed the answer  my option was D. Let me explain why I chose this answer, if we think from Security perspective it may be some other option,however, if we see from ROI perspective and from management perspective it is the classification level who they don't care about it, for how much it is developed and how much we will get as a return is only they look at. Classification for only when we are deciding to keep the product for certain industries such  as military but in general this is the right answer. So the question doesn't mention for any certain industries the option D is correct. 

Correct me if I am wrong.

Regards
Uday Kiran 

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.
To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/b25bcf76-3f64-453a-98ed-5c689e186884%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--
Regards,
Uday Kiran

Anil Kumar K

unread,
Aug 4, 2018, 2:15:16 AM8/4/18
to cissp...@googlegroups.com
Classification is done to decide value and the controls required to be put in place to protect. Wrong classification will mess up things and affects ROI.
Organisations will look for replacement costs of assets and not the general development costs.


From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of Uday Kiran <uda...@gmail.com>
Sent: Saturday, August 4, 2018 10:59:04 AM

To: cissp...@googlegroups.com
Subject: Re: [CCCure_CISSP_Talks] Asset evaluation question.

Corey Shimmel

unread,
Oct 16, 2018, 1:02:09 PM10/16/18
to cissp...@googlegroups.com
classification level are derived from asset value, you need to first identify how much that object/subject is worth to you

A. development cost / how many man hours and cost had to take place for the development of this product

B. Intellectual property or equity value / is this a trade secret that gives you the completive edge over another company make you millions in the process

C. Liability of asset loss / is this PII or PHI in the case if it is lost would encounter several finds and penalties and tarnish you name

D. Classification level / allow you to state the degree of protection that is needed for this obj /sub classification level is derived from the asset value stating you cannot have classification levels with out a value
Reply all
Reply to author
Forward
0 new messages