Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a key advantage of using a commercial threat intelligence subscription service over free sources?

   • AIt often provides more timely, curated, and context-rich intelligence
   • BIt replaces the need for any internal security monitoring
   • CIt is always free of cost
   • DIt guarantees zero false positives
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   During a vulnerability management meeting, a team member says, 'We can ignore CVE-2024-1234 because it has a low CVSS score.' The team lead wants to correct this misunderstanding. Which response is most accurate?

   • ALow CVSS scores are always safe and do not require any action.
   • BLow CVSS scores can still be exploited in combination with other weaknesses, so we should review the CVE details and our environment.
   • CCVSS scores are the only factor we need to consider when prioritizing vulnerabilities.
   • DWe should only patch vulnerabilities with a CVSS score above 9.0.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   During a security incident, the incident response team discovers that the network documentation is outdated, and several team members are unsure about the current system configurations. Which action best demonstrates proactive documentation and communication?

   • AUpdate the documentation immediately with the current findings and communicate the changes to the team.
   • BOnly update the documentation if the incident is determined to be severe.
   • CWait until the incident is over to update the documentation to avoid distractions.
   • DKeep the documentation confidential and only share it with the incident commander.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A vulnerability management team is automating the process of matching CVEs to the organization's software inventory. The team notices that some CVEs are being missed because the software versions in the inventory do not exactly match the affected version ranges in the CVE data. What is the most effective way to improve the accuracy of this automated matching?

   • ARefine the matching logic to use version range comparisons and normalize version strings from the inventory and CVE data.
   • BUse only the CVE ID to match, because it uniquely identifies the vulnerability.
   • CIgnore CVEs that do not match exactly, because they are likely false positives.
   • DManually review every CVE and compare it to the inventory, because automation is unreliable.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A security analyst is reviewing a CVE that affects a legacy application still in use by the finance department. The CVE has a CVSS score of 7.5, but there is no known exploit in the wild. The finance application cannot be patched immediately because it would cause downtime during month-end closing. Which action best balances risk and business continuity?

   • AImplement compensating controls, such as network segmentation and access restrictions, and schedule the patch after month-end closing.
   • BDisconnect the finance application from the network permanently to eliminate the risk.
   • CPatch the application immediately despite the downtime because the CVSS score is high.
   • DIgnore the CVE because there is no known exploit in the wild.
   Reveal Solution Discussion Select an answer first