Threat and Vulnerability Management ACCISO Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which activity is a key component of continuous monitoring for vulnerability management?

   • AOne-time penetration test performed annually
   • BScheduled and on-demand vulnerability scans of the environment
   • CManual review of firewall logs every quarter
   • DStatic code review during development only
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company's vulnerability scan reveals that a critical business application runs on an operating system that is no longer supported by the vendor. The application cannot be upgraded or migrated in the short term. Which remediation strategy is most appropriate to reduce risk?

   • AApply a virtual patch using an intrusion prevention system (IPS) or host-based security tool to mitigate known vulnerabilities.
   • BReplace the operating system with a newer version without testing the application.
   • CDisconnect the system from the network and run it in a standalone mode.
   • DIgnore the vulnerability because the application is critical and cannot be changed.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A software development team uses a CI/CD pipeline to deploy a web application. The security team wants to identify vulnerabilities early in the development lifecycle. Which approach is most effective for discovering vulnerabilities before production deployment?

   • AIntegrate static application security testing (SAST) into the CI/CD pipeline and run it on every code commit.
   • BReview the application's user manual for security warnings before release.
   • CConduct a penetration test once a year on the production application.
   • DPerform a network vulnerability scan of the production environment after each release.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A healthcare organization is preparing for a security assessment. The compliance team requires an evaluation of the effectiveness of existing security controls, not just the presence of vulnerabilities. The organization has limited time and budget. Which approach best meets this requirement?

   • AReview the configuration baselines of all servers and compare them to industry benchmarks.
   • BRun an authenticated vulnerability scan against all internal systems and generate a report of missing patches.
   • CPerform a penetration test that attempts to exploit identified vulnerabilities to determine whether security controls can be bypassed.
   • DDeploy a new SIEM solution to collect and correlate logs from all critical systems.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A healthcare organization has a legacy patient-portal application that handles PHI. A recent code review identified a SQL injection flaw in the login module. The organization cannot immediately rewrite the application, but it must reduce the risk while a permanent fix is developed. Which remediation strategy is most appropriate?

   • AIncrease the logging level and review logs weekly for suspicious activity.
   • BApply the latest operating system patches to the server hosting the application.
   • CDisable the login module and require all users to authenticate via a separate VPN.
   • DDeploy a web application firewall (WAF) with a rule to block SQL injection patterns and add input validation to the login module.
   Reveal Solution Discussion Select an answer first