5.1 Define Key Security Concepts (threats, Vulnerabilities, Exploits, and Mitigation Techniques) 200-301 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security analyst is investigating a breach. The attacker gained access to a server by exploiting a vulnerability in a web application, then used that server to launch attacks against other internal systems. The web application has been patched, but the analyst needs to prevent the attacker from moving laterally. Which control is MOST effective for this purpose?

   • ADisable the web application permanently
   • BChange all user passwords to stronger values
   • CImplement network segmentation and strict firewall rules between internal zones
   • DDeploy an antivirus product on all servers
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is implementing a security awareness program. The goal is to reduce the likelihood of successful phishing attacks. The company has a limited budget and must choose ONE primary control. Which control would be MOST effective?

   • AConduct regular simulated phishing campaigns and provide immediate feedback to users
   • BRequire all employees to change their passwords every 30 days
   • CPost posters in the break room reminding employees to be careful with emails
   • DPurchase a more expensive email filtering solution
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A small company's finance team frequently receives emails with invoices attached. Several employees have reported that opening these attachments sometimes triggers a pop-up asking for their email password. The IT administrator notices that the company's email gateway only scans for known malware signatures. Which mitigation should the administrator implement first to reduce the risk of credential theft from these emails?

   • AEnable sandboxing and URL reputation filtering on the email gateway
   • BDeploy a host-based intrusion prevention system on finance workstations
   • CRequire users to change their passwords every 30 days
   • DDisable email attachments from external senders
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator is configuring a new wireless network for a small office. The administrator wants to prevent unauthorized users from capturing and decrypting wireless traffic. Which configuration is the most effective mitigation?

   • ADisable the wireless network and use only wired connections
   • BEnable WPA3 with a strong passphrase and disable WPS
   • CHide the SSID and enable MAC address filtering
   • DUse WPA2 with a short passphrase for convenience
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's file server is infected with ransomware that encrypts files and displays a ransom note. The IT team restores the files from a recent backup. Which additional mitigation should be implemented to prevent a recurrence?

   • ADisconnect the file server from the network
   • BChange all user passwords immediately
   • CIncrease the frequency of backups to every hour
   • DImplement application whitelisting and restrict user permissions to only what is needed
   Reveal Solution Discussion Select an answer first