Information Security Threats and Vulnerabilities CCT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a basic mitigation strategy for addressing software vulnerabilities?

   • ASharing passwords among team members
   • BRegularly applying security patches and updates
   • CIgnoring vulnerability scan results
   • DDisabling all network firewalls
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company allows employees to connect personal smartphones to the corporate Wi-Fi network. The security team is concerned about the increased attack surface. Which of the following is the most direct attack vector introduced by this practice?

   • AMalicious apps on personal devices could intercept corporate network traffic
   • BEmployees might use their personal data plans instead of Wi-Fi
   • CThe company's firewall will be unable to filter traffic from personal devices
   • DPersonal devices will automatically receive corporate software updates
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security team is analyzing a series of attacks against a financial institution. The attacks have been ongoing for six months and involve sophisticated custom malware, targeted spear-phishing, and lateral movement. The attackers appear to be well-funded and are likely sponsored by a foreign government. The goal seems to be long-term intelligence gathering. Which of the following best describes this type of threat?

   • ADistributed denial-of-service (DDoS) attack
   • BAdvanced persistent threat (APT)
   • CInsider threat
   • DRansomware attack
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security analyst is investigating a data breach. The investigation reveals that an employee with legitimate access to customer data exfiltrated the data to a competitor for financial gain. How should the analyst classify this threat actor?

   • AInsider threat
   • BNation-state actor
   • CHacktivist
   • DScript kiddie
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A vulnerability scan reveals that a database server has a critical remote code execution vulnerability. The server is only accessible from the internal network, and the data it holds is not considered sensitive. The organization has a limited budget for remediation. Which action best balances risk and cost?

   • AApply the vendor patch immediately, even if it requires downtime
   • BAccept the risk because the server is internal and the data is not sensitive
   • CApply the patch during the next maintenance window while monitoring for suspicious activity
   • DIsolate the server from the network and defer patching until the next scheduled maintenance
   Reveal Solution Discussion Select an answer first