Threat and Vulnerability Management ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security manager needs to report to the board on the effectiveness of the vulnerability management program. Which metric would best demonstrate the program's impact on reducing risk?

   • ATotal number of vulnerabilities discovered in the last scan.
   • BPercentage of critical vulnerabilities remediated within the SLA.
   • CTime spent by the security team on vulnerability scanning.
   • DNumber of security tools deployed in the environment.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which vulnerability identification method involves an authorized, simulated attack on a system to actively exploit weaknesses and determine the real-world impact of a compromise?

   • AConfiguration audit
   • BVulnerability scanning
   • CCode review
   • DPenetration testing
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company subscribes to a threat intelligence feed that reports a new ransomware family targeting industrial control systems (ICS). The feed includes indicators of compromise (IOCs) such as command-and-control (C2) domains and file hashes. The security team wants to proactively defend against this threat. Which action should the team take first?

   • ADisconnect all ICS systems from the network until the threat is fully understood.
   • BWait for the antivirus vendor to release a signature update before taking any action.
   • CUpdate the SIEM and endpoint detection tools with the IOCs and create detection rules for the C2 domains and file hashes.
   • DConduct a full penetration test of the ICS environment to identify all possible vulnerabilities.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team is planning a penetration test of a critical application. The test must identify exploitable vulnerabilities without causing downtime. The team has a limited time window and must choose between an automated vulnerability scan and a manual penetration test. Which approach is most appropriate?

   • ARun an automated vulnerability scan first to identify potential issues, then perform a targeted manual penetration test on the highest-risk findings.
   • BOnly run an automated vulnerability scan, because it is faster and less risky.
   • COnly perform a manual penetration test, because it is more thorough.
   • DSkip both and rely on the vendor's security documentation.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which remediation strategy involves applying a vendor-supplied update to fix a known vulnerability in a software product?

   • ANetwork segmentation
   • BConfiguration change
   • CCompensating control
   • DPatching
   Reveal Solution Discussion Select an answer first