Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which of the following is a strategy to reduce the attack surface?

   • AIncreasing the number of open ports for future use
   • BDisabling unnecessary services and closing unused ports
   • CGranting all employees administrative privileges
   • DUsing default passwords for network devices
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A network defender is performing an attack surface analysis for a company that has a public-facing website, an internal HR system, and a remote-access VPN. Employees have been observed writing passwords on sticky notes. The defender must evaluate the attack vectors associated with each surface. Which approach best evaluates the attack vectors across all three surfaces?

   • AConduct a penetration test on the VPN and website, but ignore the HR system because it is internal.
   • BMap each asset to its entry points, then identify potential attack vectors for each entry point, including social vectors like password theft.
   • CInterview employees about their password habits and then implement a password manager.
   • DFocus only on the public-facing website because it is the most exposed to external attackers.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is an example of a digital attack surface element?

   • AA USB drive left in a parking lot
   • BA server room door without a lock
   • CAn employee who is susceptible to phishing
   • DAn open TCP port on a web server
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A company's security team is reviewing a recent incident where an attacker called the help desk, pretended to be a new employee, and requested a password reset. The help desk complied without verifying the caller's identity. Which control would most directly reduce the social attack surface in this scenario?

   • AIncrease the frequency of security awareness training for all employees.
   • BImplement a strict identity verification process for password reset requests, such as a callback to a verified number.
   • CDeploy an intrusion prevention system (IPS) on the network.
   • DDisable password resets entirely and require users to visit the IT office in person.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   Which statement best describes the attack surface of a network?

   • AIt is the list of all security policies and procedures in an organization
   • BIt is the sum of all possible ways an attacker can enter or exploit a system
   • CIt is the number of security patches that have been applied to the system
   • DIt is the total amount of network bandwidth available for legitimate use
   Reveal Solution Discussion Select an answer first