2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A network administrator is asked to reduce the attack surface of a corporate server. Which action is most directly aligned with this goal?

   • AConfigure the server to use a more complex password policy.
   • BInstall an antivirus solution on the server.
   • CRemove all unnecessary user accounts and disable unused network services.
   • DEnable audit logging for all user actions.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security team is implementing a vulnerability management program. They have identified a critical vulnerability in a third-party application. Which step should they take after identifying the vulnerability?

   • AImmediately apply the vendor's patch without testing.
   • BDisconnect the application from the network to eliminate the vulnerability.
   • CAssess the risk by considering the exploitability and the value of the affected asset.
   • DDocument the vulnerability and move on to the next scan.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   A security analyst is categorizing the attack surface of a small business. Which item would be classified as a human element of the attack surface?

   • AAn unpatched web server running an outdated version of Apache
   • BA firewall rule that allows inbound SSH from the internet
   • CAn employee who is susceptible to phishing emails
   • DA database that is accessible from the internal network without encryption
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A vulnerability scan identifies a high-severity issue in a web application. The application is internet-facing and contains sensitive customer data. What should the security team do first?

   • AConfirm the vulnerability is real and assess its exploitability and potential impact.
   • BApply the vendor's patch without testing.
   • CIncrease the logging level and monitor the application.
   • DImmediately take the application offline to eliminate the risk.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company's security team is explaining to management why the attack surface has grown over the past year. Which factor is the primary contributor to an increased attack surface?

   • AThe migration of email to a cloud-based provider.
   • BThe implementation of a stricter password policy.
   • CThe addition of new internet-facing applications and APIs.
   • DThe purchase of a new firewall with more advanced features.
   Reveal Solution Discussion Select an answer first