Threat Modeling and Vulnerability Assessment CSE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A vulnerability scan reveals a critical vulnerability in a public-facing web application. The application is business-critical and cannot be taken offline. The vendor has released a patch, but testing the patch requires a staging environment that is not available. What is the best course of action?

   • AApply the patch directly to production without testing
   • BDo nothing and accept the risk
   • CImplement a web application firewall (WAF) rule to mitigate the vulnerability while testing the patch
   • DTake the application offline until the patch is tested
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company exposes a set of REST APIs for its mobile app. During a threat modeling review, the team identifies that the APIs lack rate limiting and have weak authentication. Which cloud-specific threat category does this primarily represent?

   • AMisconfigured storage
   • BShared responsibility gap
   • CInsecure APIs
   • DDenial of service
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A vulnerability assessment of a cloud environment identified the following issues: (1) a high-severity vulnerability in a web application that is not exposed to the internet, (2) a medium-severity vulnerability in a public-facing API, and (3) a low-severity misconfiguration in an internal database. The security team has limited time and must prioritize remediation. Which vulnerability should be addressed first?

   • AThe low-severity misconfiguration in the internal database.
   • BThe high-severity vulnerability in the internal web application.
   • CThe medium-severity vulnerability in the public-facing API.
   • DAll three vulnerabilities should be remediated simultaneously.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company uses a cloud provider's serverless function to process user uploads. The function writes files to a storage bucket and sends notifications to a message queue. A threat model identifies that the function's IAM role has overly broad permissions, allowing it to list all buckets in the account. The team must reduce the risk of privilege escalation. What is the most effective remediation?

   • AEncrypt the storage bucket
   • BMove the function to a different region
   • CEnable logging on the function
   • DApply the principle of least privilege to the function's IAM role
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security team is conducting a vulnerability assessment of a hybrid cloud environment. They have limited time and budget. They need to scan both on-premises servers and cloud VMs. The team has access to Nessus and OpenVAS. Which approach is most efficient and effective?

   • AUse Nessus for both on-premises and cloud VMs, leveraging a single management console
   • BUse OpenVAS for on-premises and Nessus for cloud VMs
   • CScan only cloud VMs because on-premises is less risky
   • DUse manual penetration testing instead of automated scanning
   Reveal Solution Discussion Select an answer first