Threat Modeling and Vulnerability Assessment CSE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company uses a multi-cloud environment with workloads in AWS and Azure. The security team is conducting a threat modeling exercise and wants to identify threats that are unique to cloud computing. Which threat should be included in the threat model?

   • APhysical theft of servers from the data center.
   • BInsecure APIs used to manage cloud resources.
   • CMan-in-the-middle attacks on the corporate Wi-Fi network.
   • DSQL injection in a legacy on-premises application.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which remediation strategy is most aligned with cloud security best practices for a misconfigured storage bucket?

   • AApply the principle of least privilege and restrict public access
   • BMove the data to a different cloud provider
   • CIgnore the issue if the data is not sensitive
   • DDelete the storage bucket immediately
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A vulnerability scan reveals a critical remote code execution vulnerability in a web server that is not directly exposed to the internet but is accessible from the internal network. The server hosts a legacy application that cannot be patched immediately. What is the most appropriate risk treatment?

   • AAccept the risk because the server is not internet-facing
   • BApply a virtual patch or network-based intrusion prevention rule to mitigate the vulnerability
   • CShut down the server permanently
   • DIgnore the vulnerability because it is not exploitable
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of a vulnerability assessment?

   • ATo monitor network traffic for intrusions
   • BTo identify, analyze, and report security weaknesses in systems and applications
   • CTo patch all identified vulnerabilities immediately
   • DTo actively exploit vulnerabilities to prove impact
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A cloud security team is setting up vulnerability scanning for a new Kubernetes cluster. They plan to use Nessus to scan the cluster's worker nodes. What is a critical consideration for this scanning approach?

   • AScanning worker nodes is unnecessary because the provider patches them automatically
   • BKubernetes clusters cannot be scanned by any vulnerability scanner
   • CWorker nodes must be reachable from the Nessus scanner over the network
   • DNessus can scan container images directly without any additional configuration
   Reveal Solution Discussion Select an answer first