2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 7)

Questions 31–33

1. 31expert · hard

   A vulnerability management team has a limited patching window each month. They must prioritize which vulnerabilities to remediate first. Which factor should be the primary driver in their prioritization?

   • AThe number of vulnerabilities found in the scan.
   • BThe age of the vulnerability, with older ones always patched first.
   • CThe ease of applying the patch, regardless of the vulnerability's severity.
   • DThe severity score of the vulnerability combined with the criticality of the affected asset.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security analyst discovers that a web application has a critical vulnerability that could allow remote code execution. The application is business-critical and cannot be taken offline during business hours. Which action should the analyst take first?

   • AImmediately shut down the web application to prevent exploitation.
   • BDocument the vulnerability and wait for the next scheduled maintenance window.
   • CApply a virtual patch or temporary rule in the web application firewall to block exploit attempts.
   • DIncrease the logging level on the application server to capture any exploit attempts.
   Reveal Solution Discussion Select an answer first
3. 33expert · hard

   A company is deploying a new application that requires remote access for third-party vendors. The security team must balance functionality with attack surface reduction. Which approach best achieves this balance?

   • AAllow vendors to use their own remote desktop tools to access the application.
   • BExpose the application directly to the internet and rely on strong passwords.
   • CDisable remote access entirely to eliminate the attack surface.
   • DProvide vendors with a dedicated VPN that restricts access to only the necessary application and time-limited credentials.
   Reveal Solution Discussion Select an answer first