Threat and Vulnerability Management CCISO Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A government contractor is assessing its threat landscape. The contractor handles classified project data and has recently seen an increase in phishing emails targeting employees. The emails appear to come from a known state-sponsored group. Which threat category best describes this situation, and what is the most appropriate initial mitigation?

   • AInternal threat; implement data loss prevention (DLP) solutions.
   • BExternal threat; implement multi-factor authentication and advanced email filtering.
   • CExternal threat; purchase additional cyber insurance.
   • DInternal threat; conduct background checks on all employees.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary purpose of a vulnerability assessment?

   • ATo exploit vulnerabilities to determine the impact of a breach
   • BTo remove all vulnerabilities from the environment
   • CTo test the response of the incident response team
   • DTo identify, quantify, and prioritize vulnerabilities in systems and networks
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the purpose of a security configuration baseline?

   • ATo replace the need for vulnerability scanning
   • BTo provide a standard set of security settings for systems
   • CTo list all software installed on a system
   • DTo document all security incidents
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   After a security incident, a post-incident review reveals that the organization's vulnerability management program did not include several internet-facing systems that were compromised. The systems were discovered during the incident. The CISO wants to ensure that all internet-facing assets are included in future vulnerability scans. Which action is most effective?

   • AIncrease the frequency of vulnerability scans on existing systems.
   • BConduct a comprehensive asset inventory and reconcile it with the vulnerability scanner's scope.
   • CPurchase a new vulnerability scanner with better detection capabilities.
   • DRequire all new systems to be registered with the security team before deployment.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A mid-sized company has deployed a vulnerability scanner that runs weekly. The scanner reports thousands of findings, many of which are duplicates or false positives. The security team is overwhelmed and missing critical vulnerabilities. What should the team do to improve the effectiveness of its vulnerability management program?

   • AIgnore all findings that are not rated critical by the scanner.
   • BDisable the scanner and rely on manual penetration tests quarterly.
   • CTune the scanner's scan policies and credential settings to reduce false positives and duplicates.
   • DIncrease the scan frequency to daily to catch new vulnerabilities sooner.
   Reveal Solution Discussion Select an answer first