Threats, Threat Sources, and Vulnerabilities EHE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A hospital's patient records system is accessed by doctors, nurses, and administrative staff. A disgruntled former employee still has valid login credentials and uses them to access patient data after termination. Which threat source and vulnerability category best describe this incident?

   • AInsider threat; configuration vulnerability because the account was not disabled promptly
   • BExternal hacker; technical vulnerability in the patient records software
   • CMalware; human-factor vulnerability because the employee clicked a malicious link
   • DNatural disaster; physical vulnerability in the data center
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is an example of a social engineering threat?

   • AA fire that destroys a server room
   • BAn attacker posing as IT support to trick an employee into revealing their password
   • CA virus that replicates itself across the network
   • DAn attacker exploiting a software bug to gain unauthorized access
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is an example of a configuration vulnerability?

   • AA default password left unchanged on a network device
   • BAn employee falling for a phishing email
   • CA buffer overflow in a web application
   • DA lack of encryption on sensitive data at rest
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company's security team is reviewing a risk assessment. They find that a critical application has a technical vulnerability that is difficult to exploit, but the application is accessible from the internet. They also find a configuration vulnerability that is easy to exploit, but it is on an internal system with low sensitivity. Which vulnerability should be prioritized for remediation?

   • ANeither, because the company has other priorities.
   • BThe configuration vulnerability, because it is easy to exploit.
   • CThe technical vulnerability, because it is on a critical application.
   • DBoth equally, because they are both vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company's office is hit by a flood, damaging servers and causing downtime. Which threat source and threat type best describes this event?

   • ANatural disaster; physical threat
   • BConfiguration error; data loss
   • CExternal hacker; denial of service
   • DInsider threat; physical damage
   Reveal Solution Discussion Select an answer first