A vulnerability scan has identified a critical vulnerability in a database server that stores customer personal data. The vulnerability is a missing patch that is available from the vendor. However, applying the patch requires a reboot of the server, which will cause downtime for the customer-facing application. The organization has a strict SLA that requires 99.99% uptime. Which of the following is the most appropriate course of action?

Apply the patch during the next scheduled maintenance window, even if it causes brief downtime

Implement a workaround that does not require a reboot

Do not apply the patch and accept the risk of a data breach

Apply the patch immediately without considering the downtime

How does security awareness training help mitigate threats?

It reduces the likelihood of successful social engineering attacks by educating employees

It eliminates all technical vulnerabilities in the network

It replaces the need for antivirus software

It guarantees that employees will never make mistakes

An organization has experienced several ransomware infections that started when employees clicked on malicious links in emails. Which mitigation strategy would be most effective in reducing the likelihood of these infections?

Deploy additional firewalls at the network perimeter

Implement a security awareness training program that includes simulated phishing exercises

Disable all USB ports on employee workstations

Increase the frequency of full system backups

A security team is conducting a risk assessment for a new cloud-based application. The application will store sensitive customer data. The team is considering two risk treatment options: encrypting the data at rest and implementing multi-factor authentication (MFA) for all users. Which of the following statements best describes the effect of these controls on risk?

Encryption reduces the impact of a data breach, while MFA reduces the likelihood of unauthorized access

Encryption reduces the likelihood of a data breach, while MFA reduces the impact

Both controls reduce the impact of a data breach

Both controls reduce the likelihood of a data breach

A company has a mix of Windows and Linux servers. The security team wants to implement a mitigation strategy that reduces the risk of malware propagation across the network. Which strategy would be most effective?

Disable all unnecessary services on servers

Implement network segmentation to limit lateral movement

Increase the frequency of vulnerability scans

Deploy antivirus software on all servers

EC-CouncilCertified Cybersecurity Technician

Domain 1Objective 1

Information Security Threats and Vulnerabilities CCT Practice Questions (Page 5)

Part of the Information Security Threats and Attacks domain, which makes up ~12% of our current practice bank.

47questions here

10free pages

7concepts

Questions 21–25

21expert · hard
A vulnerability scan has identified a critical vulnerability in a database server that stores customer personal data. The vulnerability is a missing patch that is available from the vendor. However, applying the patch requires a reboot of the server, which will cause downtime for the customer-facing application. The organization has a strict SLA that requires 99.99% uptime. Which of the following is the most appropriate course of action?
Select an answer first
22foundation · easy
How does security awareness training help mitigate threats?
Select an answer first
23application · medium
An organization has experienced several ransomware infections that started when employees clicked on malicious links in emails. Which mitigation strategy would be most effective in reducing the likelihood of these infections?
Select an answer first
24expert · hard
A security team is conducting a risk assessment for a new cloud-based application. The application will store sensitive customer data. The team is considering two risk treatment options: encrypting the data at rest and implementing multi-factor authentication (MFA) for all users. Which of the following statements best describes the effect of these controls on risk?
Select an answer first
25application · medium
A company has a mix of Windows and Linux servers. The security team wants to implement a mitigation strategy that reduces the risk of malware propagation across the network. Which strategy would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Information Security Threats and Vulnerabilities CCT Practice Questions (Page 5)

Questions 21–25

How does security awareness training help mitigate threats?

An organization has experienced several ransomware infections that started when employees clicked on malicious links in emails. Which mitigation strategy would be most effective in reducing the likelihood of these infections?

A company has a mix of Windows and Linux servers. The security team wants to implement a mitigation strategy that reduces the risk of malware propagation across the network. Which strategy would be most effective?

Keep studying — Information Security Threats and Attacks