Cyber Threat Trends and Challenges TIE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A technology startup is seeing an increase in cryptojacking attacks where attackers use compromised cloud credentials to mine cryptocurrency. The startup uses a shared cloud account and has limited visibility into resource usage. Which action is most effective to detect and prevent this trend?

   • ARely on the cloud provider's default security settings to prevent unauthorized access.
   • BIncrease the cloud budget to accommodate the additional resource usage.
   • CDisable all cloud services and move workloads back to on-premises servers.
   • DImplement cloud account monitoring and set up alerts for unusual resource usage, and enforce the principle of least privilege on cloud credentials.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A media company has observed a trend of attackers using deepfake audio to impersonate executives in phone calls to authorize fraudulent wire transfers. The company wants to mitigate this risk. Which control is most effective?

   • AImplement a verification process for wire transfer requests that requires a second factor, such as a callback to a known number or an in-person confirmation.
   • BTrain employees to listen for subtle audio artifacts that indicate a deepfake.
   • CDeploy an AI-based voice recognition system to detect deepfake audio in all incoming calls.
   • DDisable all phone-based wire transfer authorizations and require written requests only.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A government contractor is required to comply with CMMC Level 2, which mandates incident response planning and continuous monitoring. The contractor has a small IT staff with no dedicated security personnel. The budget is tight, but the contract requires evidence of a functioning incident response capability. Which approach best satisfies the requirement while addressing the skill shortage?

   • AEngage a managed security service provider (MSSP) to provide 24/7 monitoring and incident response support under a defined SLA.
   • BDesignate the IT administrator as the incident response lead and require them to be on call 24/7.
   • CPurchase a SIEM tool and configure alerts to be sent to the IT administrator's email.
   • DWrite an incident response plan and store it in a shared folder, but do not test it until an incident occurs.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A global logistics company is experiencing an increase in ransomware attacks that use new variants, and its security team is struggling to keep up with patching because of the large number of legacy systems. The company must maintain high availability of its services and cannot afford extended downtime. Which approach best addresses the challenge of evolving attack techniques?

   • ADisconnect all legacy systems from the network to eliminate the risk they pose.
   • BImplement a vulnerability management program that prioritizes patches based on exploitability and business impact, and use virtual patching for legacy systems that cannot be updated immediately.
   • CIncrease the frequency of full system backups to ensure quick recovery after a ransomware attack.
   • DPurchase a commercial threat intelligence feed that provides indicators for all new ransomware variants.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A government agency is facing an increase in advanced persistent threat (APT) activity targeting its network. The agency has a mature security program but is concerned about the attackers' ability to evade detection by living off the land (using legitimate tools and processes). The agency has a limited budget and cannot deploy a new tool for every technique. Which approach would be most effective in detecting this type of activity?

   • AImplement a centralized logging and SIEM solution that correlates events from endpoints, servers, and network devices to detect suspicious patterns.
   • BDeploy an antivirus solution with the latest signatures on all endpoints.
   • CBlock all PowerShell and other scripting languages on endpoints.
   • DIncrease the frequency of vulnerability scans to identify and patch known vulnerabilities.
   Reveal Solution Discussion Select an answer first