Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which of the following best describes ad hoc threat intelligence?

   • AA formal, scheduled vulnerability assessment program
   • BA continuous automated feed of indicators from a commercial provider
   • CInformation gathered on an as-needed basis to address a specific immediate threat or question
   • DA database of all known vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A security analyst is reviewing a new CVE entry in the NVD. The entry includes a CVSS base score of 9.8 and a description that mentions the vulnerability affects a specific version of a widely used web server. The analyst wants to prioritize patching across the organization. Which action best uses the NVD/CVE data to support this decision?

   • ACross-reference the CVE with the organization's asset inventory to identify affected systems and their exposure.
   • BPatch all systems immediately based on the high CVSS score without checking if the vulnerable version is present.
   • CUse the CVE ID to search for exploit code and then test it against the production web server.
   • DWait for a vendor advisory before taking any action, because NVD entries are not reliable.
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   During a security conference, a network administrator learns from a peer about a newly discovered vulnerability in a network device model that the company uses. The vulnerability is not yet in any public database. The administrator wants to assess the risk and inform the team. What is the most appropriate ad hoc threat intelligence action?

   • ADocument the information, verify it with the vendor or trusted sources, and share it with the security team for risk assessment.
   • BImmediately block all traffic to the affected devices until more information is available.
   • CIgnore the information because it is not from an official source.
   • DWait for the CVE to be published before taking any action.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which of the following is an example of a collective intelligence source for threat intelligence?

   • AA single vendor's proprietary threat feed
   • BInformation Sharing and Analysis Centers (ISACs)
   • CThe local newspaper
   • DA company's internal vulnerability scan reports
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   A junior analyst is told to use the NVD to research a vulnerability. What is a primary limitation of the NVD that the analyst should keep in mind?

   • AIt provides real-time alerts immediately upon vulnerability discovery.
   • BIt does not include severity scores for any vulnerability.
   • CIt only contains vulnerabilities from open-source software.
   • DIt is a paid subscription service requiring a license.
   Reveal Solution Discussion Select an answer first