2.3 Describe the Process of Evaluating the Security Posture of an Asset 350-201 Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security team has completed a posture evaluation of a company's customer database. The database contains PII and is subject to regulatory compliance. The evaluation found several medium-risk issues and one high-risk issue. The team must present the findings to the board of directors, who are not technical. What is the best way to report the findings?

   • AFocus only on the medium-risk issues to avoid alarming the board.
   • BRecommend immediate replacement of the database system.
   • CPresent a summary that highlights the high-risk issue, its potential business impact, and recommended actions in non-technical language.
   • DProvide a detailed technical report with all CVEs and exploit details.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A security analyst has completed a posture evaluation of a company's email system. The findings show that the system lacks multi-factor authentication (MFA) and has a high risk of account compromise. What should the analyst include in the report?

   • AA suggestion to replace the email system entirely.
   • BA request for more funding without specifying how it will be used.
   • CA recommendation to implement MFA as a priority remediation action.
   • DA note that the risk is acceptable because the company has never been breached.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   During a security posture assessment of a critical application server, the team reviews the existing security controls. The server has a host-based firewall, antivirus, and a centralized logging agent. However, the team finds that the logging agent is not sending logs to the SIEM due to a configuration error. What is the most appropriate conclusion about the security controls?

   • AThe logging control is ineffective because the logs are not being collected, reducing visibility
   • BThe server's posture is good because the firewall and antivirus are working
   • CThe firewall and antivirus are sufficient to protect the server, so logging is not critical
   • DThe controls are all effective because they are installed and running
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is the purpose of evaluating existing security controls during a security posture assessment?

   • ATo replace all controls with newer versions
   • BTo identify the vendor and cost of each control
   • CTo document the controls for regulatory compliance only
   • DTo determine whether the controls are properly designed and operating as intended to mitigate risks
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A hospital is evaluating the security posture of its patient-monitoring devices. The devices are IoT-based, have limited compute resources, and transmit real-time vitals over the network. The security team must prioritize which devices to assess first. Which approach best aligns with the asset evaluation process?

   • AAssess all devices equally using the same checklist to ensure uniform coverage across the fleet.
   • BBegin with the easiest devices to access, since they are more likely to be compromised.
   • CFocus only on devices that have known CVEs, because those are the only ones that pose a risk.
   • DClassify devices by criticality to patient safety and data sensitivity, then assess threats and vulnerabilities for the highest-priority devices first.
   Reveal Solution Discussion Select an answer first