Threat Modeling and Vulnerability Assessment CSE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a vulnerability management program that scans production systems weekly. The scans consistently report the same critical vulnerability, but the remediation team claims it is a false positive. The security team needs to resolve the disagreement. What is the most effective approach?

   • AAccept the remediation team's claim and close the finding
   • BManually verify the vulnerability by testing the affected system
   • CRemove the vulnerability from the report
   • DIncrease the scan frequency to daily
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which tool is commonly used for vulnerability scanning in cloud environments?

   • AWireshark
   • BNmap
   • CMetasploit
   • DNessus
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst is conducting a vulnerability assessment of a cloud environment. The analyst has completed the scanning phase and is now analyzing the results. Which activity is part of the analysis phase?

   • ARunning a second scan with a different tool to confirm the results.
   • BCorrelating scan results with threat intelligence to determine which vulnerabilities are actively exploited.
   • CDocumenting the scan results in a report for management.
   • DPatching the vulnerabilities that have the highest CVSS scores.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of threat modeling in a cloud environment?

   • ATo monitor cloud logs for real-time security incidents and alert administrators
   • BTo enforce compliance with regulatory standards by generating audit reports
   • CTo identify and prioritize potential security threats and design mitigations before they are exploited
   • DTo scan running cloud workloads for known vulnerabilities and patch them automatically
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A vulnerability scan of a cloud environment identifies the following issues: (1) a critical SQL injection flaw in a public-facing web app, (2) a medium-severity missing patch on an internal admin server, and (3) a low-severity information disclosure in a non-critical internal tool. The team has limited resources. Which vulnerability should be remediated first?

   • AThe SQL injection flaw, because it is critical and externally exploitable
   • BAll three at the same time, to ensure comprehensive security
   • CThe information disclosure, because it is a confidentiality issue
   • DThe missing patch, because it is on an internal server
   Reveal Solution Discussion Select an answer first