2.3 Describe the Process of Evaluating the Security Posture of an Asset 350-201 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A manufacturing company is evaluating the security posture of its industrial control system (ICS). The ICS is isolated from the internet but has a history of insider threats. The security team is conducting a threat and vulnerability assessment. Which threat source should be considered most relevant?

   • ADisgruntled employees with physical access to the ICS.
   • BNation-state actors targeting the ICS from the internet.
   • CCompetitors trying to steal trade secrets via phishing.
   • DNatural disasters affecting the facility.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which sequence best represents the overall process of evaluating the security posture of an asset?

   • AEvaluate controls, score the risk, identify the asset, assess threats, classify criticality, and report findings
   • BClassify criticality, report findings, identify the asset, assess threats, evaluate controls, and score the risk
   • CIdentify the asset, classify its criticality, assess threats and vulnerabilities, evaluate existing controls, score the risk, and report findings with remediation recommendations
   • DAssess threats, identify the asset, score the risk, evaluate controls, classify criticality, and report findings
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company has a critical internal application that is accessed by employees remotely via a VPN. The VPN requires multi-factor authentication (MFA). During a posture assessment, the team finds that the application has a known critical vulnerability that could allow remote code execution. The vulnerability is not patchable for 30 days. The team must decide on immediate remediation actions. What is the most appropriate combination of actions?

   • ADisable MFA to simplify access for remote employees
   • BDo nothing because the VPN and MFA provide sufficient protection
   • CImplement network segmentation to limit access to the application and increase monitoring for suspicious activity
   • DTake the application offline immediately, regardless of business impact
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which of the following is an example of a security control that would be evaluated for its effectiveness?

   • AThe asset's purchase date and warranty status
   • BA firewall rule set that restricts inbound traffic to the asset
   • CThe asset's depreciation schedule
   • DThe asset's physical color and label
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An organization is evaluating the security posture of its customer support portal. The portal has a known vulnerability that could allow unauthorized access to customer tickets. The vulnerability is rated as high severity, but the portal is only accessible from the internal network. How should the risk be scored?

   • ALow, because internal threats are rare.
   • BHigh, because the vulnerability is high severity regardless of exposure.
   • CMedium, because the internal-only access reduces the likelihood of exploitation.
   • DCannot be determined without a penetration test.
   Reveal Solution Discussion Select an answer first