Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a high rate of insider threats, including employees accidentally sharing sensitive files and one case of an employee deliberately exfiltrating data. The security team wants to reduce the social attack surface but must balance employee privacy and productivity. The team is considering several controls.

   • ATerminate employees who are suspected of insider threats without investigation.
   • BDisable all USB ports and external storage devices on company computers.
   • CMonitor all employee email and instant messaging content for sensitive data.
   • DImplement a data loss prevention (DLP) system that monitors and blocks unauthorized transfers of sensitive data.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the first step in performing an attack surface analysis?

   • AMapping the system's entry points and assets
   • BApplying security patches to all systems
   • CDeploying intrusion detection systems
   • DConducting penetration testing on the network
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company recently experienced a data breach where an employee was tricked into transferring funds to a fraudulent account. The attacker used publicly available information about the employee's role and recent projects. The security team is analyzing the attack surface and wants to reduce the likelihood of similar incidents.

   • ARequire two-person approval for all financial transfers above a certain amount.
   • BImplement a policy that limits the amount of personal and professional information employees share on social media and company websites.
   • CConduct a penetration test on the company's external-facing systems.
   • DDeploy an email filtering solution that blocks emails from external domains.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A small business runs a file server that also has an internet-facing FTP service enabled for a legacy partner. The server is patched, but the FTP service is outdated and has known vulnerabilities. The business wants to reduce its attack surface without losing the partner's ability to transfer files.

   • AReplace the FTP service with a secure, patched file-transfer solution such as SFTP or a managed file-transfer service.
   • BApply a virtual patch using an intrusion prevention system (IPS) signature for the FTP vulnerability.
   • CKeep FTP enabled but restrict it to the partner's IP address using a firewall rule.
   • DDisable FTP entirely and ask the partner to use email for file transfers.
   Reveal Solution Discussion Select an answer first
6. 10application · medium · select all that apply

   A security team is performing an attack surface analysis for a financial institution. Which activities are part of the attack surface analysis process? (Select all that apply.)

   • AMapping all network entry points, including VPN endpoints and web portals.
   • BEvaluating social engineering vectors like phishing and pretexting.
   • CDeploying a firewall to block all inbound traffic.
   • DIdentifying physical access points such as server rooms and network jacks.
   • EConducting a penetration test to exploit identified vulnerabilities.
   Check answers Discussion Select an answer first