Explain Common Threats and Vulnerabilities 100-160 Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A company deploys hundreds of smart sensors for environmental monitoring. The sensors are connected to the corporate network and use default credentials. The security team is concerned about the sensors being compromised and used in a botnet. Which combination of measures would best reduce this risk?

   • ADisable the sensors' internet access and rely on physical security
   • BIncrease the number of sensors to dilute the attack surface
   • CChange default credentials and segment the IoT devices onto a separate network
   • DUse a firewall to block all inbound traffic to the sensors
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which of the following is a potential indicator of a malicious insider threat?

   • AAn employee taking a scheduled vacation
   • BAn employee requesting a new keyboard
   • CAn employee attending a security awareness training
   • DAn employee accessing sensitive files outside of normal working hours without a business need
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   What is a defining characteristic of an Advanced Persistent Threat (APT)?

   • AIt is a highly sophisticated, long-term attack that aims to remain undetected
   • BIt is a type of malware that spreads rapidly
   • CIt is an attack that only targets IoT devices
   • DIt is a short-lived attack that is easily detected
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   An attacker gains access to a server room by following an authorized employee through a door that requires a badge. The attacker is not wearing a badge. Which type of social engineering attack is this, and what is the most effective control to prevent it?

   • APhishing; enforce a clean desk policy
   • BVishing; install CCTV cameras
   • CShoulder surfing; use a biometric lock
   • DTailgating; implement a mantrap
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A company's network is experiencing a DDoS attack. The attack traffic is coming from a botnet that includes many IoT devices. The company wants to reduce the impact of the attack while also preventing the IoT devices from being used in future attacks. Which approach addresses both concerns?

   • AShut down the company's network until the attack stops
   • BImplement DDoS mitigation at the network perimeter and notify the owners of the IoT devices to clean their devices
   • CIncrease the company's internet bandwidth to absorb the attack
   • DBlock all traffic from IoT devices on the internet
   Reveal Solution Discussion Select an answer first