Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is it important to regularly update documentation?

   • ATo ensure that information remains accurate and relevant over time
   • BTo make the documentation more complex
   • CTo satisfy the IT department's preference for frequent changes
   • DTo increase the file size of the documentation
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a primary benefit of automated threat intelligence tools in vulnerability identification?

   • AThey are only useful for small networks
   • BThey eliminate the need for human analysts
   • CThey provide continuous, real-time monitoring and alerting
   • DThey guarantee that all vulnerabilities are found
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which method is most effective for securing sensitive documentation at rest?

   • ARenaming the files to inconspicuous names
   • BEncrypting the files and restricting access with permissions
   • CStoring them in a publicly accessible cloud folder for easy access
   • DPrinting them and leaving them on a shared desk
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security team is evaluating threat intelligence sources to improve their vulnerability identification process. They want a source that provides real-time alerts about emerging threats and allows them to share information with other organizations. Which option best meets this need?

   • AMonitor social media posts for any mention of the company name.
   • BRely solely on the NVD website, which is updated nightly with new CVEs.
   • CUse only internal incident reports from the past year.
   • DSubscribe to a commercial threat intelligence feed that offers real-time alerts and a community sharing platform.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is responding to a ransomware incident. They have a documented incident response plan, but the plan is stored in a shared folder that only the team lead can edit. The team lead is on vacation. The team needs to update the plan with new containment steps. Which action best addresses the situation while maintaining security?

   • AGive all team members edit access to the shared folder immediately.
   • BCreate a new plan from scratch and share it with the team without version control.
   • CWait for the team lead to return to update the plan.
   • DHave the team lead's backup delegate update the plan using the documented change process.
   Reveal Solution Discussion Select an answer first