2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An organization wants to reduce the attack surface of its corporate network. Which combination of actions is most effective?

   • AUse strong passwords and enable multi-factor authentication on all accounts.
   • BIncrease the number of firewalls and rely on intrusion detection systems.
   • CAllow all services to run and monitor logs for suspicious activity.
   • DDisable unused services, apply patches regularly, and enforce least-privilege access controls.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has a legacy application that requires a deprecated protocol. The protocol has known vulnerabilities, and the application cannot be upgraded. The security team must reduce the attack surface while keeping the application operational. Which approach is most effective?

   • AUse a protocol analyzer to monitor traffic and detect attacks.
   • BEnable the deprecated protocol on all firewalls to ensure compatibility.
   • CApply a custom patch that is not vendor-supported.
   • DSegment the application onto a separate network and allow access only from specific administrative workstations.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst is reviewing a report that lists a missing security patch as a 'vulnerability.' Which statement best explains why this is classified as a vulnerability?

   • AThe missing patch increases the number of open ports on the system.
   • BThe missing patch is an entry point that attackers use to access the system.
   • CThe missing patch leaves a known weakness in the software that could be exploited.
   • DThe missing patch is a human error that cannot be fixed.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security architect must reduce the attack surface of a critical application that cannot be taken offline. The application uses a legacy protocol that is inherently insecure and cannot be patched. The architect has a limited budget and must choose one primary control. Which control provides the most effective attack surface reduction?

   • AReplace the legacy protocol with a VPN tunnel.
   • BImplement network segmentation and strict access control lists to limit which hosts can reach the application.
   • CDeploy an intrusion prevention system (IPS) in front of the application.
   • DIncrease logging and monitoring to detect attacks earlier.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which sequence correctly represents the vulnerability management process?

   • AAssess, monitor, identify, and mitigate
   • BMitigate, identify, monitor, and assess
   • CMonitor, mitigate, assess, and identify
   • DIdentify, assess, mitigate, and monitor
   Reveal Solution Discussion Select an answer first