Threat and Vulnerability Management ACCISO Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which standardized scoring system is commonly used to assess the severity of a vulnerability based on metrics such as attack vector, complexity, and impact?

   • ACommon Vulnerability Scoring System (CVSS)
   • BCommon Weakness Enumeration (CWE)
   • CNIST Cybersecurity Framework (CSF)
   • DCommon Vulnerabilities and Exposures (CVE)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which type of threat is characterized by a prolonged, targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period, often to steal sensitive data?

   • ARansomware outbreak
   • BAdvanced persistent threat (APT)
   • CDistributed denial-of-service (DDoS) attack
   • DPhishing campaign
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A regional bank's security team notices a pattern of spear-phishing emails targeting its treasury department. The emails reference recent wire-transfer procedures and include a malicious attachment. The team has limited resources and must decide where to focus its immediate defensive efforts. Which approach best aligns with threat intelligence integration and risk prioritization?

   • AIncrease the frequency of full-disk backups for all servers in the data center.
   • BConduct a full vulnerability scan of all internal systems to identify any missing patches.
   • CBlock the attachment hash across all email gateways and prioritize user awareness training for the treasury team.
   • DDisable email access for the entire organization until the campaign is fully analyzed.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst has completed a vulnerability scan and identified the following issues: a critical RCE vulnerability on an internet-facing web server, a high-severity SQL injection in an internal HR application, and a medium-severity misconfiguration on a development database. The organization has limited staff and can only remediate one issue this week. Which vulnerability should be addressed first?

   • AThe medium-severity misconfiguration on the development database.
   • BThe critical RCE on the internet-facing web server.
   • CThe high-severity SQL injection in the internal HR application.
   • DAll three simultaneously, because all vulnerabilities must be fixed immediately.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A regional bank has observed a series of targeted phishing emails sent to its treasury staff. The emails reference recent wire-transfer procedures and contain a malicious attachment that, when opened, establishes a covert command-and-control channel. The bank's security team suspects an advanced persistent threat (APT) group known for targeting financial institutions. Which combination of actions should the team prioritize to address this threat?

   • ABlock the phishing email sender domains, quarantine the malicious attachment, and increase monitoring of treasury workstations for indicators of compromise (IOCs) related to the suspected APT.
   • BDisable all email attachments for treasury staff and require in-person confirmation for any wire transfer.
   • CIncrease the frequency of full-disk backups for treasury workstations and store them offsite.
   • DConduct a full vulnerability scan of all internet-facing systems and patch any critical findings within 72 hours.
   Reveal Solution Discussion Select an answer first