Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security auditor is assessing the physical attack surface of a data center. The data center has a mantrap entrance, CCTV cameras, and a biometric access control system. However, the auditor notices that a contractor badge is left unattended at the front desk, and a delivery person is allowed to enter the server floor without an escort. Which physical attack surface element is most directly exploited in this scenario?

   • AThe biometric access control system, which is a secure authentication method.
   • BThe CCTV cameras, which are monitoring the facility.
   • CThe unattended contractor badge, which could be used to gain unauthorized access.
   • DThe mantrap entrance, which is a physical control that prevents tailgating.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an example of a social attack surface element?

   • AA server without a lock on its rack
   • BAn open port on a firewall
   • CA web application with a cross-site scripting vulnerability
   • DAn employee who is susceptible to phishing attacks
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a web application that frequently adds new features. The security team wants to continuously monitor the attack surface for new vulnerabilities and misconfigurations. Which approach best achieves this?

   • ADisable all unused features to reduce the attack surface.
   • BReview firewall logs monthly for unusual traffic patterns.
   • CDeploy an automated vulnerability scanner that runs weekly and integrates with the CI/CD pipeline.
   • DPerform an annual penetration test and update the risk register.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which method is commonly used to continuously monitor the attack surface?

   • APerforming annual security audits
   • BConducting a one-time penetration test
   • CReviewing firewall logs only after a security incident
   • DAutomated vulnerability scanning on a regular schedule
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A network defender is tasked with performing an attack surface analysis for a company that uses a mix of on-premises servers and cloud-based SaaS applications. Which sequence of steps best follows the attack surface analysis process?

   • AIdentify all entry points, map them to assets, evaluate the associated attack vectors, and then prioritize mitigation efforts.
   • BPatch all known vulnerabilities first, then map the network topology.
   • CDeploy a firewall, then scan for open ports, then document findings.
   • DEvaluate attack vectors, then identify entry points, then map assets.
   Reveal Solution Discussion Select an answer first