Threat and Vulnerability Management ACCISO Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   How does integrating threat intelligence feeds into vulnerability management primarily improve an organization's security posture?

   • AIt helps prioritize vulnerabilities that are actively being exploited in the wild
   • BIt guarantees that no future attacks will succeed
   • CIt automatically patches all identified vulnerabilities
   • DIt eliminates the need for vulnerability scanning
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A security analyst is reviewing the results of a vulnerability scan. The scan identified a critical vulnerability in a public-facing web server that is not yet patched. The analyst also notices that the server has been sending outbound traffic to a known malicious IP address. What should the analyst do first?

   • AImmediately isolate the server from the network to prevent further malicious activity.
   • BApply the patch for the critical vulnerability as soon as possible.
   • CConduct a full forensic analysis of the server before taking any action.
   • DUpdate the vulnerability scan report to include the outbound traffic observation.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A security manager wants to establish a continuous monitoring program to track the status of vulnerabilities across the organization. The program should provide visibility into remediation progress and help identify areas that need attention. Which set of metrics is most appropriate for this program?

   • AAmount of budget allocated to security and the number of security staff.
   • BTotal number of security incidents in the past year and the cost of each incident.
   • CNumber of employees who completed security awareness training and their test scores.
   • DNumber of open vulnerabilities by severity, average time to remediate, and percentage of vulnerabilities remediated within the SLA.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A security manager must decide how to allocate a limited remediation budget. The organization has a public-facing web application with a critical SQL injection vulnerability and an internal legacy application with a high-severity vulnerability that is not internet-exposed. The web application generates significant revenue, while the legacy application is used by a small internal team. Which remediation strategy best balances risk and business impact?

   • ASplit the budget evenly between both vulnerabilities.
   • BRemediate the SQL injection in the web application first, because it is internet-exposed and has higher business impact if compromised.
   • CDefer both remediations until the next budget cycle.
   • DRemediate the legacy application first, because it is easier and cheaper to fix.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A security manager needs to provide a monthly report to the executive team that shows the overall security posture and the progress of remediation efforts. The report should highlight trends and identify areas that need attention. Which approach is most effective?

   • AShare the raw vulnerability scan reports with the executive team for their review.
   • BGenerate a dashboard that tracks the number of open vulnerabilities by severity, the average time to remediate, and the percentage of vulnerabilities remediated within the SLA.
   • CProvide a summary of the latest penetration test results, including the number of exploits that succeeded.
   • DList all vulnerabilities discovered in the past month with their CVSS scores and affected systems.
   Reveal Solution Discussion Select an answer first