2.3 Describe the Process of Evaluating the Security Posture of an Asset 350-201 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A financial services firm is starting a security posture evaluation. The firm has a mix of assets: a customer transaction database, a public marketing website, internal employee workstations, and a legacy HR system. The firm has limited assessment resources and wants to focus on the assets that pose the greatest risk. Which asset should be classified as the highest priority for assessment?

   • AInternal employee workstations, because there are many of them
   • BCustomer transaction database, because it contains sensitive financial data and is critical to operations
   • CLegacy HR system, because it is old
   • DPublic marketing website, because it is internet-facing
   Reveal Solution Discussion Select an answer first
2. 22application · easy

   A small business wants to evaluate the security posture of its network. They have a mix of desktops, laptops, and a single server. The owner wants a structured approach. What is the first step in the process?

   • AIdentify and classify all assets based on their importance to the business.
   • BImmediately install antivirus software on all devices.
   • CConduct a penetration test on the network.
   • DReview firewall logs for suspicious activity.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security analyst is scoring risks for two assets: a public web server and an internal HR database. The web server has a high-severity vulnerability that is easy to exploit, but it only hosts static content. The HR database has a medium-severity vulnerability that is difficult to exploit, but it contains highly sensitive employee data. The analyst must prioritize remediation. Which asset should be scored as higher risk?

   • AThe HR database, because the impact of a data breach is much higher despite the lower exploitability
   • BThe web server, because the vulnerability is easy to exploit
   • CBoth should be scored equally because both have vulnerabilities
   • DThe web server, because it is internet-facing
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   After completing a security posture evaluation of a legacy file server, an analyst has identified several high-risk findings. The server is used by the finance department and contains sensitive financial records. What should the analyst do first?

   • ADelete the sensitive files to reduce the impact of a breach.
   • BImmediately shut down the server to eliminate the risk.
   • CWait for the next scheduled maintenance window to address the findings.
   • DReport the findings to management with recommended remediation actions prioritized by risk.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security team is assessing the threat landscape for a company's email system. The system uses a cloud-based email service with strong spam filtering and multi-factor authentication (MFA). The team identifies that the company has been targeted by business email compromise (BEC) attacks. What is the most significant threat to the email system's security posture?

   • AThe cloud provider's data center location
   • BThe spam filtering being too aggressive and blocking legitimate emails
   • CBEC attacks that rely on social engineering to trick employees into transferring funds or sharing sensitive information
   • DThe cost of the email service
   Reveal Solution Discussion Select an answer first