Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security consultant is explaining the concept of attack surface to a client. The client asks for examples of each category. Which set of examples correctly maps to the three main categories?

   • ADigital: open ports; Physical: server room; Social: phishing emails.
   • BDigital: web application; Physical: USB drives; Social: weak passwords.
   • CDigital: employee laptops; Physical: data center; Social: insider threat.
   • DDigital: firewall rules; Physical: network cables; Social: malware.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A network administrator is reducing the attack surface of a Windows server that runs a legacy application. The application requires only TCP port 443 for HTTPS and uses a local database. Which set of actions best reduces the attack surface without breaking the application?

   • AEnable Remote Desktop Protocol (RDP) for remote administration and keep all services running for compatibility.
   • BMove the application to a different port and disable the firewall.
   • CInstall additional security software and leave the default configuration unchanged.
   • DDisable all unnecessary services, close all ports except 443, and apply the latest security patches.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security team is conducting an attack surface analysis for a company that recently migrated to a cloud environment. They discover that several cloud storage buckets are publicly accessible. The team must decide how to address this. Which action is most aligned with the attack surface analysis process?

   • AMove all data to a different cloud provider.
   • BMap the buckets to the data they contain, evaluate the risk of exposure, and then prioritize remediation based on data sensitivity.
   • CIgnore the buckets because they are in the cloud and not physically accessible.
   • DImmediately make the buckets private and document the change.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A network defender is mapping the digital attack surface of a web application. Which element should be included in the mapping?

   • AThe physical location of the web server.
   • BThe employees who administer the web server.
   • CThe open ports and protocols used by the web application.
   • DThe data center's cooling system.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A hospital's network includes networked medical devices, such as infusion pumps and patient monitors, connected to the same VLAN as administrative workstations. The security team is performing an attack surface analysis. Which physical attack surface element should they address first?

   • AThe medical devices themselves, because they are hardware with network interfaces that can be accessed from the administrative VLAN.
   • BThe badge system for employees, because unauthorized personnel could enter restricted areas.
   • CThe network jacks in public waiting areas that allow physical connection to the internal network.
   • DThe server room door lock, because physical access to servers is a critical risk.
   Reveal Solution Discussion Select an answer first