Threat and Vulnerability Management CCISO Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company is deploying a new fleet of Linux web servers. The security team wants to reduce the attack surface from the start. Which approach best aligns with security configuration management principles?

   • AInstall all available software packages to ensure the servers have every feature users might need.
   • BDeploy the servers first and conduct a vulnerability scan after they are in production.
   • CConfigure servers with default vendor settings and rely on the network firewall for protection.
   • DUse a hardened baseline image that disables unnecessary services and applies the principle of least privilege.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A company's security team has been conducting regular vulnerability assessments and penetration tests for two years. The tests have consistently found the same types of vulnerabilities, and the remediation rate has been high. The CISO wants to know if the security program is actually reducing risk over time. Which metric would provide the most meaningful insight?

   • AThe trend of exploitable vulnerabilities over time, adjusted for changes in the attack surface.
   • BThe time to remediate critical vulnerabilities.
   • CThe percentage of vulnerabilities that are remediated within the agreed service level agreements (SLAs).
   • DThe number of vulnerabilities found in each scan.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In a risk assessment, what does 'likelihood' refer to?

   • AThe number of vulnerabilities in a system
   • BThe potential damage caused by a threat event
   • CThe cost of implementing a control
   • DThe probability that a threat will exploit a vulnerability
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A logistics company's risk assessment identified a high-risk vulnerability in the firmware of its barcode scanners. The vendor has released a patch, but applying it requires taking the scanners offline for 30 minutes each, which would halt warehouse operations. The company has a backup set of scanners that can be used during patching. What is the best risk mitigation approach?

   • AAccept the risk because patching is too disruptive to operations.
   • BDisconnect the scanners from the network and continue using them offline.
   • CPatch the scanners during a scheduled maintenance window using the backup scanners to maintain operations.
   • DPurchase cyber insurance to cover potential losses from a firmware exploit.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is patch management important for reducing vulnerabilities?

   • AIt ensures all software is always up to date, closing known security holes
   • BIt prevents all zero-day attacks
   • CIt is only required for operating systems
   • DIt eliminates the need for other security controls
   Reveal Solution Discussion Select an answer first