Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A security team maintains a documentation repository containing network diagrams, vulnerability scan results, and incident response procedures. The team needs to ensure that only authorized personnel can view or modify this information, while still allowing easy access for those who need it. Which method best secures the documentation?

   • AStore the documentation in a shared drive with role-based access control and require multi-factor authentication for access.
   • BEncrypt the files with a single shared password and distribute it to all team members.
   • CPost the documentation on a public wiki to ensure easy access for all employees.
   • DPrint all documentation and keep it in a locked filing cabinet, because physical security is the most reliable.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which industry-standard tool is specifically designed to scan network services and hosts to identify open ports and the versions of services running on them?

   • AJohn the Ripper
   • BWireshark
   • CNmap
   • DMetasploit
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is a best practice for sharing documentation with team members?

   • AEmail the documents to each team member individually
   • BPost the documents on a public website for easy access
   • CStore them on a personal USB drive and share when needed
   • DUse a centralized, version-controlled repository with appropriate access controls
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A security incident is in progress. The incident response team is updating the incident response plan in real time. The team lead wants to ensure that all members have the latest information and that the documentation is secure. The team is distributed across multiple locations. What is the best approach for managing documentation during the incident?

   • APost updates on a public wiki to ensure everyone has access, because speed is more important than security.
   • BEmail updates to the team after each major action, and keep the master document on a local drive.
   • CHave each team member maintain their own notes and share them at the end of the incident.
   • DUse a shared, access-controlled collaboration platform with real-time editing and version history, and assign a documentation lead.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   An analyst is investigating a phishing campaign that specifically targets their organization. Which ad hoc method would be most useful to gather immediate intelligence?

   • ASearching public forums and social media for mentions of the campaign
   • BReviewing last year's penetration test report
   • CRunning a scheduled vulnerability scan
   • DWaiting for the next quarterly threat intelligence report
   Reveal Solution Discussion Select an answer first