Threat and Vulnerability Management CCISO Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A retail company's security team is planning a vulnerability assessment of its network. The team needs to identify which systems are exposed to the internet and then prioritize remediation based on the likelihood of exploitation. Which combination of activities best achieves this goal?

   • AConduct a penetration test to exploit all discovered vulnerabilities, then report the results.
   • BRun an authenticated internal scan to identify all software versions, then patch everything equally.
   • CRun an unauthenticated external scan to identify exposed services, then use threat intelligence to prioritize findings.
   • DReview firewall logs to identify allowed traffic, then disable all unused ports.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A regional bank has completed a vulnerability assessment and identified a critical SQL injection flaw in a legacy customer-facing web application. The application is scheduled for replacement in 10 months, and the vendor no longer provides patches. The bank's compliance team requires that customer data remain protected in the interim. Which risk treatment approach best balances the bank's constraints?

   • AImmediately decommission the application and move all functionality to a new system.
   • BTransfer the risk by purchasing cyber insurance that covers breach costs.
   • CAccept the risk because the application will be replaced within a year.
   • DApply a web application firewall (WAF) rule to block SQL injection attempts and add compensating monitoring.
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A company's risk assessment identifies two significant threats: a disgruntled employee with privileged access who could exfiltrate data, and an external hacker group that has been targeting the company's industry. The company has a limited budget and can only fully address one threat this year. Which factor should most influence the CISO's decision on which threat to address first?

   • AThe ease of implementing a control for each threat.
   • BThe cost of the control for each threat.
   • CThe likelihood and potential impact of each threat, based on current threat intelligence and business context.
   • DThe preference of the business unit that would be affected.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A regional hospital is evaluating its exposure to ransomware. The IT team has identified that the electronic health record (EHR) system has a known unpatched vulnerability, and the hospital's backup solution has not been tested in over a year. The CISO must decide how to allocate limited security budget. Based on a risk assessment, which combination of actions best reduces the overall risk?

   • APurchase cyber insurance to cover potential ransom payments and business interruption.
   • BPatch the EHR vulnerability and conduct a full backup restoration test.
   • CIncrease the frequency of vulnerability scans to detect other weaknesses.
   • DImplement multi-factor authentication (MFA) on all user accounts.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A university IT team is deploying 200 new Windows workstations for a research lab. The lab's grant agreement requires compliance with a security framework that mandates secure configuration baselines. The team wants to reduce the attack surface while ensuring researchers can still install approved software. Which approach should they take?

   • AInstall all available patches and then allow unrestricted local administrator access to researchers.
   • BUse a vulnerability scanner to identify weaknesses after deployment and fix them as they appear.
   • CDeploy a hardened image with a documented baseline and allow approved software via a controlled process.
   • DApply the vendor's default configuration and rely on the firewall for protection.
   Reveal Solution Discussion Select an answer first