2.4 Evaluate the Security Controls of an Environment, Diagnose Gaps, and Recommend Improvement 350-201 Practice Questions (Page 8)

Questions 36–38

1. 36application · medium

   A security analyst is comparing the organization's current security controls against the CIS Benchmarks. The analyst finds that the firewall is configured correctly, but the database server is missing several recommended patches. What does this finding represent?

   • AA misconfiguration of the firewall
   • BA gap in the security control implementation
   • CAn acceptable risk that requires no action
   • DA false positive from the benchmark tool
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An organization is evaluating its security controls against ISO 27001. The assessment shows that the organization has a strong patch management process but lacks a formal security awareness training program. What is the most appropriate recommendation?

   • ARemove the training requirement from the standard.
   • BImplement a security awareness training program.
   • CIncrease the frequency of patch management.
   • DConduct a penetration test to identify other gaps.
   Reveal Solution Discussion Select an answer first
3. 38expert · hard

   A security team is evaluating the effectiveness of their network access control (NAC) solution. The NAC is configured to require endpoint compliance checks before allowing access to the network. However, the team discovers that some devices are bypassing the NAC by using a rogue access point. The security policy requires that all devices be compliant before accessing the network. What is the most appropriate recommendation?

   • AAllow non-compliant devices to access the network.
   • BIncrease the compliance check frequency.
   • CDisable the NAC because it is not working.
   • DDeploy wireless intrusion prevention (WIPS) to detect and block rogue access points.
   Reveal Solution Discussion Select an answer first