Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 11)

Questions 51–52

1. 51application · medium · select all that apply

   A security operations center (SOC) is establishing continuous attack surface monitoring. Which methods should they implement? (Select all that apply.)

   • AAutomated vulnerability scanning on a regular schedule.
   • BConfiguration drift detection against a secure baseline.
   • CMonitoring of new device connections to the network.
   • DAnnual penetration testing only.
   • EReviewing firewall logs once a year.
   Check answers Discussion Select an answer first
2. 52application · medium · select all that apply

   A company wants to reduce its attack surface. Which actions are effective attack surface reduction strategies? (Select all that apply.)

   • AApplying security patches to operating systems and applications.
   • BDisabling unnecessary network services on servers.
   • CIncreasing the number of open ports for future scalability.
   • DPlacing all servers on the same VLAN for easier management.
   • EImplementing strict access controls and least privilege.
   Check answers Discussion Select an answer first