Threats, Threat Sources, and Vulnerabilities EHE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A disgruntled employee, before leaving the company, copies sensitive customer data to a personal USB drive and later sells it to a competitor. Which threat source and threat type does this represent?

   • ACompetitor; social engineering
   • BNatural disaster; data loss
   • CExternal hacker; malware
   • DInsider threat; data theft
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A developer leaves a debug backdoor in a web application, allowing unauthorized access. In risk terms, what is the backdoor?

   • AA threat
   • BAn asset
   • CA risk
   • DA vulnerability
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does a threat typically cause harm to an organization?

   • ABy directly damaging hardware without any prior weakness
   • BBy creating new vulnerabilities in a system
   • CBy increasing the likelihood of a vulnerability being discovered
   • DBy exploiting a vulnerability in a system or process
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a high-profile public website. They face two threats: a hacktivist group planning a DDoS attack, and a disgruntled employee with access to the content management system. The company has limited budget. Which threat should they prioritize mitigating?

   • ANeither, because threats are unpredictable.
   • BThe hacktivist group, because DDoS attacks are more common.
   • CThe disgruntled employee, because insider threats can cause more damage due to legitimate access.
   • DBoth equally, because they are the same threat type.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company's security team is reviewing a recent incident where an employee's laptop was stolen from a coffee shop. The laptop contained unencrypted sensitive files. Which vulnerability category and threat source best describe this incident?

   • AHuman-factor vulnerability (employee carelessness) and a social engineering threat
   • BTechnical vulnerability (outdated software) and a malware threat
   • CConfiguration vulnerability (weak password) and an insider threat
   • DPhysical vulnerability (lack of encryption) and a physical threat (theft)
   Reveal Solution Discussion Select an answer first