Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which item is considered part of the digital attack surface?

   • AA help desk operator who can be tricked into resetting passwords
   • BA laptop left unattended in a conference room
   • CA badge reader at the building entrance
   • DA web application with a SQL injection vulnerability
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What are the three main categories of attack surface?

   • ANetwork, application, and data
   • BDigital, physical, and social
   • CInternal, external, and partner
   • DHardware, software, and firmware
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company recently experienced a data breach after an employee clicked a malicious link in a phishing email. The security team is conducting an attack surface analysis. Which category of attack surface should they prioritize for immediate reduction?

   • AAll attack surfaces equally, since any category could be exploited.
   • BPhysical attack surface, by adding badge readers to server room doors.
   • CSocial attack surface, by implementing security awareness training and email filtering.
   • DDigital attack surface, by disabling unused ports and protocols on the firewall.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A financial firm has a high rate of employee turnover. The security team is concerned about the social attack surface, particularly departing employees with access to sensitive systems. Which strategy is most effective in reducing this risk?

   • AMonitor the activities of departing employees during their notice period.
   • BConduct exit interviews to remind departing employees of their confidentiality obligations.
   • CImmediately revoke access credentials and disable accounts upon employee termination.
   • DIncrease security awareness training for all employees.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A manufacturing company has a production network that controls robotic assembly lines. The production network is isolated from the corporate network, but a recent audit found that a vendor connected a laptop to the production network for maintenance, and the laptop had internet access. The company wants to reduce the attack surface of the production network without disrupting production. The vendor needs remote access for future maintenance.

   • ADisable internet access on the production network and require the vendor to be on-site for all maintenance.
   • BSet up a VPN directly into the production network for the vendor.
   • CAllow the vendor to connect directly to the production network but only during scheduled maintenance windows.
   • DImplement a jump server with strict access controls and require the vendor to connect through it for all maintenance.
   Reveal Solution Discussion Select an answer first