1.4 Compare Security Concepts 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A regional bank is evaluating its exposure to a new banking trojan that targets the specific online banking platform the bank uses. The trojan has been observed in the wild for six months, but the bank's endpoint protection has blocked all known variants. The bank's security team has limited budget and must decide how to handle this risk. Which action best represents risk acceptance in this scenario?

   • ADocument the residual risk and continue monitoring, since current controls are effective and the cost of additional mitigation exceeds the expected loss.
   • BImmediately decommission the online banking platform and move all customers to a different, unaffected platform.
   • CDeploy an additional endpoint detection and response (EDR) tool to every workstation to provide a second layer of defense.
   • DPurchase a cyber insurance policy that would cover the costs of a potential breach caused by the trojan.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester is assessing a network and discovers that a web application is vulnerable to SQL injection. The tester uses a tool to inject malicious SQL commands into the application's login form and successfully retrieves user credentials. What is the exploit in this scenario?

   • AThe SQL injection vulnerability in the application
   • BThe user credentials retrieved from the database
   • CThe malicious SQL commands injected into the login form
   • DThe penetration tester's authorization to test the application
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the first step in a typical risk assessment process?

   • AIdentifying assets and their value to the organization
   • BSelecting security controls to mitigate risks
   • CEvaluating the likelihood of each threat
   • DDetermining the impact of potential incidents
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital is conducting a risk assessment. The assessment team has identified that the electronic health record (EHR) system is a critical asset. They have also identified that the system runs an outdated operating system with known unpatched vulnerabilities. Which step of the risk assessment process is the team currently performing?

   • AThreat and vulnerability analysis, because they are identifying weaknesses in the EHR system.
   • BRisk treatment, because they are deciding how to mitigate the vulnerabilities.
   • CRisk evaluation, because they are determining the likelihood and impact of exploitation.
   • DAsset identification, because they are listing the EHR system as a critical asset.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which step in a risk assessment involves determining the potential harm to the organization if a threat exploits a vulnerability?

   • AAsset identification
   • BVulnerability analysis
   • CThreat analysis
   • DRisk evaluation
   Reveal Solution Discussion Select an answer first