2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's security team is reviewing the attack surface of its environment. Which of the following is an example of a human element of the attack surface?

   • AAn employee who falls for phishing emails and provides credentials.
   • BAn unpatched web server with a known vulnerability.
   • CA misconfigured firewall that allows unnecessary inbound traffic.
   • DAn open Wi-Fi network that allows unauthorized devices to connect.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which strategy is an example of attack surface reduction?

   • AApplying security patches to close known vulnerabilities
   • BDeploying an intrusion detection system (IDS) to monitor traffic
   • CCreating a detailed incident response plan
   • DImplementing multi-factor authentication (MFA) for all users
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is reviewing a report that lists several weaknesses in the company's environment. Which finding is best classified as a vulnerability?

   • AAn employee left a USB drive in a conference room.
   • BThe company's website is accessible from the internet.
   • CThe company does not have a formal incident response plan.
   • DA web server is missing a security patch for a known remote code execution flaw.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement correctly describes the relationship between attack surface and vulnerability?

   • AReducing the attack surface eliminates all vulnerabilities
   • BA vulnerability is a weakness that may exist within the attack surface
   • CA vulnerability is the total number of entry points in a system
   • DAttack surface and vulnerability are interchangeable terms
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security team discovers a zero-day vulnerability in a widely used application. No patch is available, and the application is critical to operations. Which action is the most appropriate immediate response?

   • AUninstall the application and use a different product immediately.
   • BWait for the vendor to release a patch before taking any action.
   • CImplement temporary compensating controls, such as application whitelisting and network restrictions, while monitoring for patches.
   • DDisconnect the application from the network indefinitely.
   Reveal Solution Discussion Select an answer first