2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is reviewing its security posture and wants to reduce its attack surface. The network includes a legacy application that listens on several ports, a public-facing web server, and employees who frequently click phishing links. Which action most directly reduces the attack surface?

   • ADisable unused services and close unnecessary ports on the legacy application.
   • BInstall an antivirus product on all employee workstations.
   • CConduct a phishing awareness training session for all employees.
   • DIncrease the logging level on the web server to capture more detail.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which example best illustrates a vulnerability?

   • AAn open TCP port 443 on a public-facing web server
   • BA web application that does not validate user input, allowing SQL injection
   • CA hacker using a brute-force attack to guess a password
   • DA firewall that blocks all inbound traffic except HTTP
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company wants to reduce its attack surface without affecting business operations. Which combination of actions best achieves this goal?

   • ADisable unused network services, apply security patches, and enforce least-privilege access controls.
   • BSegment the network and implement a firewall, but leave all services running.
   • CReplace all software with open-source alternatives and use stronger passwords.
   • DIncrease logging, deploy a SIEM, and hire additional security analysts.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary goal of vulnerability management?

   • ATo eliminate all possible entry points into a network
   • BTo detect active attacks in real time and block them
   • CTo assign a severity score to every vulnerability once it is discovered
   • DTo identify, assess, and mitigate vulnerabilities to reduce the risk of exploitation
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which statement best defines the attack surface of an organization's network?

   • AThe number of users who have administrative privileges on critical systems
   • BThe specific set of vulnerabilities that have been identified and assigned a severity score
   • CThe physical perimeter of the data center where servers are hosted
   • DThe total sum of all potential entry points that an attacker could use to gain unauthorized access
   Reveal Solution Discussion Select an answer first