Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's security team maintains a runbook for incident response. The team wants to ensure the runbook is always accurate and accessible to the right people. Which practice best supports this goal?

   • AStore the runbook in a version-controlled repository and require team members to review changes.
   • BShare the runbook with all employees to ensure broad awareness.
   • CUpdate the runbook only when a major incident occurs.
   • DKeep the runbook as a Word document on the incident commander's personal laptop.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team needs to share sensitive network documentation with external auditors. The documentation includes IP addresses, firewall rules, and system configurations. The team wants to protect the data while allowing the auditors to review it. Which approach best balances security and usability?

   • AGive the auditors direct access to the internal documentation system with full edit rights.
   • BPrint the documentation and mail it to the auditors.
   • CEmail the documentation as encrypted PDFs to the auditors.
   • DProvide the auditors with a secure portal that requires multi-factor authentication and grants read-only access to the documentation.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator is updating the organization's runbook after a security incident. The runbook is stored in a shared document management system. The administrator wants to ensure that the updated version is easily accessible to the incident response team while preventing outdated versions from being used. What is the best practice?

   • AEmail the updated runbook to the incident response team and delete the shared copy.
   • BKeep the old runbook and add the new information as an appendix, to preserve all details.
   • CSave the updated runbook with a clear version number and archive the previous version, then notify the team of the update.
   • DOverwrite the existing runbook without saving a history, to avoid confusion.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A small company wants to perform a vulnerability assessment of its internal network. The IT team has limited experience and needs a tool that can scan for known vulnerabilities, provide remediation guidance, and generate reports that can be shared with management. The budget is tight, so the tool must be cost-effective. Which approach best meets these requirements?

   • AUse only the NVD website to manually check every system against known CVEs, because it is the official vulnerability database.
   • BUse a commercial vulnerability scanner with a free tier that includes basic scanning and reporting, and supplement it with manual checks for critical assets.
   • CConduct only manual vulnerability assessments using checklists and public CVE databases, because they are free and require no additional tools.
   • DPurchase an expensive enterprise-grade scanner with all features, because only high-end tools can generate management-ready reports.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has multiple security teams that maintain separate documentation for the same network infrastructure. This has led to conflicting information and confusion during incidents. The company wants to improve documentation accuracy and accessibility. Which approach is most effective?

   • AKeep the separate documentation but require each team to update their own copies regularly.
   • BConsolidate all documentation into a single, version-controlled knowledge base with defined ownership and review cycles.
   • CAppoint a single person to be the only one allowed to update documentation.
   • DCreate a new documentation system and migrate only the most recent documents from each team.
   Reveal Solution Discussion Select an answer first