Threat and Vulnerability Management ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team has implemented a vulnerability management program that scans monthly. The team is overwhelmed by the number of findings and struggles to prioritize remediation. The CISO wants to improve the program's efficiency without adding staff. Which change would most effectively address the team's challenge?

   • AOutsource all vulnerability scanning to a third-party provider.
   • BIncrease the scan frequency to weekly to identify vulnerabilities sooner.
   • CImplement a risk-based scoring system that automatically assigns priority based on asset criticality and vulnerability severity.
   • DReduce the scope of scans to only internet-facing systems.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A financial services firm has a vulnerability management program that scans quarterly. After a recent audit, the auditor recommends more frequent tracking of remediation progress. The security manager wants to implement a continuous monitoring approach without overburdening the team. Which change best addresses the auditor's recommendation?

   • AIncrease the quarterly scan scope to include all cloud resources and third-party applications.
   • BSend a monthly email to all employees asking them to report any unusual system behavior.
   • CReplace the quarterly scans with a single annual penetration test.
   • DImplement a weekly automated vulnerability scan and generate a dashboard showing remediation status by asset owner.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security analyst is investigating a series of unusual network connections from a server that runs a critical application. The connections are occurring at odd hours and are encrypted. The analyst suspects a sophisticated attacker may have compromised the server. Which action should the analyst take first?

   • AIsolate the server from the network to prevent further communication with the suspected attacker.
   • BRun a vulnerability scan on the server to identify any missing patches.
   • CWait for more data to confirm the compromise before taking action.
   • DReview the server's firewall rules to see if any changes were made recently.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which threat category relies on manipulating human psychology to trick individuals into divulging confidential information or performing actions that compromise security?

   • ADenial-of-service (DoS) attack
   • BMalware
   • CMan-in-the-middle (MITM) attack
   • DSocial engineering
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A security team is integrating a new threat intelligence feed into its vulnerability management process. The feed provides indicators of compromise (IOCs) for various threats. The team wants to prioritize which IOCs to act on first. Which factor should be most important in this prioritization?

   • AThe total number of IOCs in the feed.
   • BThe relevance of the IOC to the organization's industry and environment.
   • CThe source of the feed, with commercial feeds always being more reliable.
   • DThe age of the IOC, with older IOCs being more important.
   Reveal Solution Discussion Select an answer first