Information Security Threats and Vulnerabilities CCT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is concerned about the risk of malware infections from employees downloading files from the internet. Which of the following is the most effective mitigation strategy to reduce this risk?

   • AImplement application allowlisting to prevent unauthorized programs from executing
   • BIncrease the frequency of antivirus signature updates
   • CEncourage employees to use personal devices for internet browsing
   • DRestrict internet access to a small group of employees
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A vulnerability scan of a web server reports that the server is running an outdated version of OpenSSL with a known critical vulnerability. The server is behind a firewall that blocks all inbound traffic except HTTPS on port 443, and the vulnerability is only exploitable through a local shell. The security team is preparing a risk report. How should the team characterize this finding?

   • AA vulnerability with high risk because the scan identified a critical CVE
   • BA vulnerability with moderate risk that should be patched during the next maintenance window
   • CA vulnerability with low risk because the firewall blocks the attack path
   • DA vulnerability that is not a risk because it is not remotely exploitable
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst observes that a user's workstation is sending a large volume of encrypted data to an external IP address during off-hours. The user is unaware of any unusual activity. Which type of threat is most likely occurring?

   • AA distributed denial-of-service (DDoS) attack originating from the workstation
   • BA phishing email that tricked the user into revealing credentials
   • CA remote access Trojan (RAT) that is exfiltrating data
   • DA ransomware infection that is encrypting local files
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security analyst is profiling a threat actor who has been conducting low-level attacks against multiple organizations. The actor uses publicly available tools and follows known exploit tutorials. Their attacks are often noisy and easily detected. The motivation appears to be gaining recognition or simply causing disruption. How should the analyst classify this threat actor?

   • AScript kiddie
   • BCybercriminal
   • CNation-state actor
   • DInsider threat
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has discovered that a former employee, who was laid off, still has valid credentials to the corporate network. The employee has not used them since termination, but the credentials were not revoked. Which threat actor type does this situation most closely resemble?

   • AA nation-state actor using the credentials for espionage
   • BA hacktivist group using the credentials to make a political statement
   • CAn external hacker who obtained the credentials through a data breach
   • DAn insider threat, because the former employee has knowledge and access that could be misused
   Reveal Solution Discussion Select an answer first