Information Security Threats and Vulnerabilities CCT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A small manufacturing company's IT team notices repeated login attempts against its public-facing VPN gateway from a range of IP addresses that trace back to a known cybercriminal forum. The attempts are low-volume but persistent over several weeks, and no data has been exfiltrated. The company's leadership wants to understand the likely intent behind these attempts before deciding on a response. Which characterization best fits this activity?

   • AAn insider threat employee testing the VPN from home to see if their access still works after resignation
   • BA cybercriminal group performing reconnaissance and credential-stuffing to establish a foothold for future ransomware or data theft
   • CA hacktivist group conducting a denial-of-service campaign to protest the company's environmental record
   • DA nation-state actor conducting a one-time espionage operation to steal proprietary manufacturing blueprints
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A vulnerability assessment has been completed, and the report lists several vulnerabilities with different severity ratings. The security team has limited resources to fix them. Which of the following should be the primary factor in deciding which vulnerabilities to remediate first?

   • AThe order in which the vulnerabilities were discovered
   • BThe number of systems affected by each vulnerability
   • CThe ease of patching each vulnerability
   • DThe likelihood of exploitation and the potential impact on critical assets
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which statement correctly defines risk in the context of information security?

   • AThe total number of vulnerabilities in a system
   • BThe cost of implementing security controls
   • CThe probability of a threat actor being caught
   • DThe likelihood that a threat will exploit a vulnerability and the resulting impact
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A vulnerability scan reveals a critical remote code execution vulnerability in a legacy application that is no longer supported by the vendor. The application is used by the finance department and cannot be taken offline during business hours. Which of the following is the most appropriate risk treatment option?

   • AImmediately shut down the application until a patch is available
   • BAccept the risk and continue operations without any changes
   • CTransfer the risk by purchasing a cyber insurance policy
   • DImplement compensating controls such as network segmentation and strict access controls
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's security team is reviewing its attack surface. They find that a legacy application is accessible from the internet and has known unpatched vulnerabilities. The application is not business-critical and is used by only a few employees. Which action would most effectively reduce the attack surface?

   • AConduct a vulnerability scan to identify additional weaknesses
   • BAdd a firewall rule to restrict access to the application from specific IP addresses
   • CApply the latest patches to the legacy application
   • DRemove the application from the internet and place it on the internal network only
   Reveal Solution Discussion Select an answer first