Threat and Vulnerability Management CCISO Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services firm recently completed a vulnerability assessment that identified a critical remote code execution flaw in a legacy customer-facing web application. The application cannot be patched immediately because the vendor has not released a fix, and the business cannot take the application offline during normal hours. The CISO must reduce the risk of exploitation while a permanent solution is developed. Which action should the CISO prioritize?

   • ADeploy a web application firewall (WAF) with a virtual patch rule in front of the application.
   • BIncrease the frequency of vulnerability scans on the application to detect any new exposures.
   • CImmediately remove the application from the network until the vendor releases a patch.
   • DDisable the application's user authentication to reduce the attack surface.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which threat category best describes an attacker who uses social engineering to trick an employee into revealing their credentials?

   • ANatural disaster
   • BInsider threat
   • CExternal threat
   • DAccidental threat
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company has seen an increase in phishing emails targeting its finance department. The emails appear to come from the CEO and request urgent wire transfers. The CISO wants to reduce the likelihood of a successful attack. Which control is most effective for this specific threat?

   • ADeploy an intrusion prevention system (IPS) at the network perimeter.
   • BDisable email access for the finance department.
   • CIncrease the frequency of vulnerability scans on the email server.
   • DImplement a second-person approval process for wire transfers and provide targeted security awareness training.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A financial firm is deploying a new cloud-based customer relationship management (CRM) system. The security team has created a secure configuration baseline, but the business team wants to enable a feature that requires weakening the baseline (e.g., allowing legacy authentication protocols). The feature is important for a major client. The CISO must decide how to proceed. Which approach best aligns with security governance?

   • AApprove the exception with a documented risk acceptance signed by the business owner and implement compensating controls.
   • BDeny the request because the baseline must never be changed.
   • CImplement the feature and then conduct a vulnerability scan to see if it causes issues.
   • DAllow the feature without documentation because the client is important.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does hardening a system reduce its attack surface?

   • ABy allowing all network traffic by default
   • BBy installing more third-party applications
   • CBy increasing the number of user accounts
   • DBy disabling unnecessary services and ports
   Reveal Solution Discussion Select an answer first