Threat and Vulnerability Management CCISO Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which of the following is a common use of a vulnerability scanner?

   • ABlocking malicious traffic at the firewall
   • BSimulating a phishing attack on employees
   • CPerforming routine security checks on network devices
   • DEncrypting data at rest
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A financial services firm's threat intelligence team has been tracking a new banking trojan that is being distributed via malicious Excel macros. The firm's email gateway blocks macros in attachments, but the trojan is also known to spread through USB drives. The firm's endpoint protection has no signature for the trojan yet. What is the most effective immediate action to reduce the risk of infection?

   • AIncrease the frequency of vulnerability scans on all endpoints.
   • BSend a phishing awareness email to all employees.
   • CWait for the endpoint protection vendor to release a signature update.
   • DDisable USB ports on all endpoints via group policy.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which risk assessment framework provides a structured approach to evaluating and treating risks?

   • AISO/IEC 27005
   • BOWASP Top 10
   • CCIS Controls
   • DNIST SP 800-53
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company has completed a vulnerability assessment that identified several high-risk findings. The CISO wants to validate whether the vulnerabilities are actually exploitable and to test the effectiveness of existing security controls. Which activity should be performed next?

   • ARe-run the vulnerability scan with a different tool to confirm the findings.
   • BConduct a penetration test that attempts to exploit the identified vulnerabilities in a controlled manner.
   • CImmediately patch all identified vulnerabilities without further analysis.
   • DUpdate the risk register with the findings and accept the risk.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the primary purpose of a vulnerability scanning tool?

   • ATo exploit vulnerabilities to gain access
   • BTo manually test for zero-day vulnerabilities
   • CTo automatically detect known vulnerabilities in systems and networks
   • DTo monitor network traffic for intrusions
   Reveal Solution Discussion Select an answer first