Threat Mitigation DS0-001 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has implemented email filtering and security awareness training, but a sophisticated phishing campaign has successfully compromised several database administrator accounts. The attackers used spear-phishing emails that appeared to come from the company's CEO and contained personalized information. Which additional control would be MOST effective in preventing future compromises?

   • AIncrease the frequency of security awareness training
   • BDisable email access for database administrators
   • CImplement multi-factor authentication (MFA) for all database accounts
   • DImplement a stricter password policy
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which strategy is most effective in mitigating the impact of a denial of service attack on a database server?

   • AIncreasing the database's maximum connection limit
   • BDisabling the database's error logging
   • CImplementing rate limiting on the database connection pool
   • DRemoving all indexes from the database
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A database server is under a distributed denial of service (DDoS) attack that is exhausting the connection pool. The administrator has implemented rate limiting, but the attack is still causing service degradation. The administrator needs to maintain availability for legitimate users. Which additional measure is MOST effective?

   • AAdd more CPU and memory to the database server
   • BDisable the database's public IP address
   • CImplement a database-level firewall to block all traffic from unknown IPs
   • DIncrease the connection pool size and set shorter connection timeouts
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security audit reveals that a web application is vulnerable to SQL injection. The development team is considering several fixes, but the application is legacy and the team is concerned about breaking functionality. Which approach balances security and stability?

   • ADisable the database's public access
   • BRewrite the entire application from scratch
   • CUse parameterized queries for all new code and gradually refactor existing code
   • DImplement a web application firewall (WAF) as the only fix
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's database server has been infected with ransomware. The administrator has restored the data from backups, but the ransomware also encrypted the backup files that were stored on a network share. Which additional measure should the administrator implement to prevent this from happening again?

   • AStore backups on a separate, isolated network segment with restricted access
   • BIncrease the frequency of backups
   • CEncrypt the backups
   • DUse a different backup software
   Reveal Solution Discussion Select an answer first