Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A large enterprise has a diverse environment with on-premises servers, cloud workloads, and IoT devices. The security team wants to implement automated threat intelligence for continuous vulnerability identification. They have a limited budget and need to prioritize the most critical assets. Which approach best balances automation, coverage, and cost?

   • APurchase the most expensive commercial threat intelligence platform and deploy it across all assets without prioritization.
   • BRely on the cloud provider's built-in security center and ignore on-premises and IoT devices.
   • CDeploy a vulnerability scanner that integrates with a free threat intelligence feed and prioritize scanning based on asset criticality.
   • DUse only manual ad hoc threat intelligence methods because they are free.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security analyst discovers a critical vulnerability in a third-party application used by the finance department. The vendor has released a patch, but applying it requires a brief downtime. The analyst needs to communicate this to stakeholders. What is the most effective communication strategy?

   • ANotify the finance department and IT management in advance, explaining the risk and the planned downtime, and schedule the patch during a low-activity period.
   • BApply the patch immediately without notifying anyone, because the vulnerability is critical and speed is essential.
   • CSend a general email to all employees after the patch is applied, describing what was done.
   • DAsk the finance department to approve the patch without explaining the risk, to avoid alarming them.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst is correlating vulnerability data from multiple sources. The analyst finds a CVE ID in a threat intelligence feed and wants to confirm the affected software versions and the remediation steps. Which source should the analyst consult first for authoritative details?

   • AThe CVE ID itself, because it contains all necessary details.
   • BA social media post from a security researcher discussing the CVE.
   • CThe vendor's security advisory page for the affected product.
   • DA random blog that summarizes the CVE and suggests workarounds.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   During an active cybersecurity incident, what is a key communication practice?

   • AWithhold all information until the incident is resolved
   • BProvide regular, accurate updates to stakeholders
   • CShare unverified information to keep everyone updated
   • DOnly communicate through social media
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to continuously identify vulnerabilities across its cloud infrastructure. They have a DevOps team that deploys code frequently. Which approach best aligns with automated threat intelligence and continuous vulnerability identification?

   • AIntegrate vulnerability scanning into the CI/CD pipeline and use a threat intelligence feed to prioritize findings.
   • BRun a vulnerability scan manually once a year and review the report.
   • CWait for customers to report issues before investigating vulnerabilities.
   • DRely on the cloud provider's default security features and do not perform additional scanning.
   Reveal Solution Discussion Select an answer first