Define Essential Security Principles 100-160 Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is designing a backup strategy for its customer database. The database is updated frequently, and the company wants to ensure that data can be restored quickly after a ransomware attack. The company also needs to ensure that the backups themselves are not encrypted by the ransomware. Which approach best balances availability and integrity of the backups?

   • AUse a single backup copy stored in a cloud bucket without versioning.
   • BStore immutable backups that cannot be modified or deleted, with frequent snapshots.
   • CCreate backups only weekly to reduce storage costs.
   • DStore backups on the same server as the database to ensure fast access.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following best defines a threat in cybersecurity?

   • AA weakness in a system or its defenses that can be exploited
   • BThe likelihood and impact of a vulnerability being exploited
   • CAny potential danger that could exploit a vulnerability to cause harm
   • DA specific method or tool used to take advantage of a vulnerability
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which motivation is most commonly associated with ransomware attacks?

   • AActivism
   • BRevenge
   • CFinancial gain
   • DEspionage
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A cybersecurity professional discovers that a colleague has been selling customer data to a third party without authorization. The professional is unsure whether to report the colleague because the colleague is a close friend. According to the cybersecurity code of ethics, what should the professional do?

   • AReport the colleague to the appropriate authority
   • BIgnore the situation to protect the friendship
   • CWarn the colleague to stop but do not report
   • DConfront the colleague privately and do nothing else
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company has a legacy application that is critical to operations. The application has a known vulnerability that could allow an attacker to gain remote access. The vendor no longer provides patches. The company cannot afford to replace the application immediately. Which approach best balances risk reduction with operational continuity?

   • AImplement compensating controls such as network segmentation and strict access controls
   • BDisconnect the application from the network until it can be replaced
   • CIgnore the vulnerability because the application is critical
   • DReplace the application immediately regardless of cost
   Reveal Solution Discussion Select an answer first