Threat Assessment with Attack Surface Analysis CND Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A data center has a publicly accessible lobby with a conference room that has an unsecured network wall jack. The jack is connected to the corporate network. Which physical attack surface reduction measure is most appropriate?

   • AMove the conference room to a different location.
   • BInstall a firewall between the conference room and the corporate network.
   • CDisable the wall jack and implement 802.1X authentication on all network ports.
   • DPlace a sign warning that unauthorized access is prohibited.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which action would most effectively reduce the attack surface of a server?

   • AUsing a simple password for the administrator account
   • BConnecting the server directly to the internet for easier access
   • CApplying the latest security patches to the operating system and applications
   • DEnabling all available services to increase functionality
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is considered a social attack surface element?

   • AA network printer that is accessible from the internet
   • BAn insider threat from a disgruntled employee
   • CA data center's cooling system failure
   • DA misconfigured access control list on a router
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A company's network includes a legacy HVAC control system that is connected to the corporate network for monitoring. The system runs an outdated operating system that cannot be patched. The security team wants to reduce the attack surface while keeping the HVAC system operational.

   • ADisconnect the HVAC system from the network and monitor it manually.
   • BReplace the HVAC system with a modern, patched system.
   • CPlace the HVAC system behind a firewall but allow all traffic from the corporate network to it.
   • DSegment the HVAC system onto a separate network with strict firewall rules allowing only necessary monitoring traffic.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A security analyst is classifying attack surface elements for a new project. Which classification is correct?

   • AA phishing email is a social attack surface element.
   • BA web application firewall is a digital attack surface element.
   • CA USB drive left in a parking lot is a physical attack surface element.
   • DA database server is a social attack surface element.
   Reveal Solution Discussion Select an answer first