Threat Modeling and Vulnerability Assessment CSE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security team is conducting a vulnerability assessment of a cloud-based application. They have completed the scanning phase and identified several vulnerabilities. The team lead wants to ensure the findings are properly analyzed and reported. Which step is most critical to perform after scanning and before remediation?

   • AValidate the scan results to eliminate false positives and correlate them with the actual threat model.
   • BImmediately patch all identified vulnerabilities to reduce the attack surface.
   • CRun a second scan with a different tool to confirm the results.
   • DGenerate a report that lists all vulnerabilities without prioritizing them.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which cloud-specific threat involves gaps in responsibility between the cloud provider and the customer?

   • AShared responsibility gaps
   • BInsecure APIs
   • CMalware infections
   • DDenial of service attacks
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which step in the vulnerability assessment process involves verifying that a reported vulnerability is real and not a false positive?

   • AReporting
   • BAnalysis
   • CRemediation
   • DScanning
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A vulnerability scan of a cloud environment reveals the following findings: (1) an S3 bucket with public read access containing non-sensitive marketing files, (2) a critical remote code execution vulnerability in a public-facing web application, and (3) a medium-severity SSL misconfiguration on an internal admin portal. The security team has limited resources and must prioritize remediation. Which vulnerability should be addressed first?

   • AAll three vulnerabilities should be remediated simultaneously.
   • BThe critical remote code execution vulnerability in the public-facing web application.
   • CThe S3 bucket with public read access to non-sensitive marketing files.
   • DThe medium-severity SSL misconfiguration on the internal admin portal.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security team is conducting a vulnerability assessment of a cloud environment that includes both production and development environments. The team has limited time and must decide which environment to scan first. The production environment contains customer data, while the development environment is used for testing new features. Which approach is the most appropriate?

   • AScan both environments simultaneously to save time.
   • BScan the development environment first to identify vulnerabilities before they reach production.
   • CScan the production environment first because it contains customer data and has a higher risk of impact.
   • DScan the development environment first because it is easier to remediate vulnerabilities there.
   Reveal Solution Discussion Select an answer first