Cyber Threat Trends and Challenges TIE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A cloud-native startup has grown rapidly and now processes sensitive customer data. The company uses many third-party APIs and open-source libraries. The security team is small and has limited time to review code. The company has experienced a data breach due to a vulnerable dependency. The team is considering implementing a software composition analysis (SCA) tool, a web application firewall (WAF), or a runtime application self-protection (RASP) tool. Which approach would best address the root cause of the breach while fitting the team's constraints?

   • AUse a RASP tool to monitor application behavior and block attacks at runtime.
   • BConduct a manual code review of all third-party libraries before each release.
   • CImplement an SCA tool that integrates into the CI/CD pipeline and blocks builds with known vulnerable dependencies.
   • DDeploy a WAF in front of the application to block exploit attempts against known vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A government contractor is seeing an increase in advanced persistent threat (APT) activity targeting its employees via spear-phishing and zero-day exploits. The organization has a mature security program but is constrained by strict data-handling regulations that limit what data can be shared with external parties. Which action is most appropriate to improve its defensive posture?

   • AIncrease the frequency of penetration tests to identify and patch vulnerabilities before attackers exploit them.
   • BJoin an information-sharing and analysis center (ISAC) for its industry sector to receive timely threat intelligence while carefully sanitizing any data shared.
   • CContract with a commercial threat intelligence vendor to provide a daily feed of global indicators of compromise (IOCs).
   • DDeploy additional endpoint detection and response (EDR) tools to automatically block zero-day exploits.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A hospital is seeing an increase in attacks targeting Internet of Things (IoT) medical devices, such as infusion pumps and monitors. The devices are difficult to patch and are often on the same network as critical systems. Which action is most effective to reduce the risk?

   • AReplace all IoT medical devices with newer models that have better security features.
   • BDisable network connectivity on all IoT devices to prevent remote attacks.
   • CSegment the network so IoT devices are isolated from critical systems, and monitor traffic between segments for anomalous activity.
   • DApply the latest firmware patches to all IoT devices as soon as they are released.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A mid-sized healthcare provider is struggling to keep pace with ransomware incidents reported by its industry peers. The security team consists of three generalists who also handle helpdesk duties. The organization has a limited budget and cannot afford a 24/7 security operations center. Which strategy would best address the challenge of evolving ransomware tactics while respecting the resource constraints?

   • AHire two additional security analysts to create a small internal 24/7 monitoring rotation.
   • BImplement a strict backup strategy and test restoration procedures monthly, but do not invest in additional monitoring tools.
   • CSubscribe to a managed detection and response (MDR) service that provides 24/7 monitoring and incident response guidance.
   • DPurchase additional endpoint detection and response (EDR) licenses and assign each generalist to review alerts during their normal shift.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A manufacturing company is struggling to fill a security analyst position because of a regional shortage of cybersecurity professionals. The company has a limited budget and cannot offer competitive salaries. Which approach is most practical to address the skill shortage?

   • AOutsource all security operations to a managed security service provider (MSSP) and eliminate the in-house team.
   • BAutomate routine security operations tasks, such as alert triage and patch verification, using orchestration playbooks.
   • CReduce the scope of security monitoring to only the most critical systems to lower the workload.
   • DOffer higher salaries to attract candidates from other regions, even if it exceeds the budget.
   Reveal Solution Discussion Select an answer first