3.9 Recommend the General Mitigation Steps to Address Vulnerability Issues 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which topic should be included in a user security awareness program to address human-related vulnerabilities?

   • AHow to configure network firewalls
   • BHow to write custom intrusion detection signatures
   • CHow to identify and report suspicious emails and links
   • DHow to perform forensic analysis of compromised systems
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is it important to test patches in a non-production environment before deploying them to production systems?

   • ATo determine the cost of the patch in terms of licensing
   • BTo ensure the patch is compatible with the organization's applications and does not introduce new issues
   • CTo ensure that the patch is approved by the change advisory board
   • DTo verify that the patch is digitally signed by the vendor
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which configuration change is an example of hardening a network device to reduce its attack surface?

   • AEnabling all available features to maximize functionality
   • BUsing default passwords for ease of management
   • CDisabling unused services and ports
   • DAllowing remote management from any IP address
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does network segmentation help mitigate the impact of a vulnerability?

   • AIt prevents all vulnerabilities from being exploited
   • BIt ensures that all traffic is encrypted end-to-end
   • CIt limits the ability of an attacker to move laterally from a compromised segment to other parts of the network
   • DIt eliminates the need for patching and other vulnerability remediation
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which sequence best represents the general process of mitigating vulnerability issues in a network?

   • AMonitor, detect, respond, and recover
   • BPatch, scan, report, and archive
   • CAssess, accept, transfer, and avoid
   • DIdentify, prioritize, remediate, verify, and monitor
   Reveal Solution Discussion Select an answer first