1.4 Compare Security Concepts 200-201 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security analyst is performing a risk assessment for a new online payment system. The analyst has identified the payment system as a critical asset, identified that a cybercriminal group could attempt to steal payment data, and identified that the system has a vulnerability in its encryption implementation. What is the next step in the risk assessment process?

   • APurchase cyber insurance to cover potential losses
   • BImplement a firewall to protect the payment system
   • CDetermine the likelihood and impact of the threat exploiting the vulnerability
   • DDocument the threat actor's motivation
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A security team is prioritizing vulnerabilities found in a web application. They have identified three risks: Risk A has a likelihood score of 8 and an impact score of 2. Risk B has a likelihood score of 5 and an impact score of 5. Risk C has a likelihood score of 2 and an impact score of 9. The team uses a simple multiplication of likelihood and impact to score risks. Which risk should be addressed first?

   • ARisk B
   • BRisk C
   • CRisk A
   • DAll risks should be addressed simultaneously
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security analyst is investigating an alert. The alert shows that an attacker sent a specially crafted packet to a network service, which caused the service to crash. The analyst determines that the service had a buffer overflow vulnerability. Which term best describes the specially crafted packet?

   • AA threat, because it represents a potential danger to the system.
   • BA vulnerability, because it is a weakness in the service.
   • CAn exploit, because it is a specific technique used to take advantage of the vulnerability.
   • DA risk, because it represents the potential for loss.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security analyst notices that a competitor's website has been defaced with a political message. The attacker appears to be motivated by ideological beliefs rather than financial gain. Which type of threat actor is most likely responsible?

   • AInsider threat
   • BNation-state actor
   • CCybercriminal
   • DHacktivist
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A web application firewall (WAF) logs show repeated attempts to exploit a SQL injection vulnerability in a legacy application. The application is scheduled for replacement in six months. The security team has confirmed that the WAF is effectively blocking all exploit attempts. Which statement best describes the relationship between the threat, vulnerability, and risk in this scenario?

   • AThe SQL injection vulnerability is the threat, and the WAF is the risk.
   • BThe risk is the SQL injection vulnerability, and the threat is the WAF.
   • CThe WAF is the vulnerability, and the exploit attempts are the risk.
   • DThe exploit attempts are the threat, the SQL injection flaw is the vulnerability, and the risk is the potential damage if the WAF fails.
   Reveal Solution Discussion Select an answer first