Cyber Threat Trends and Challenges TIE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A retail company has noticed a trend of attackers using legitimate cloud services (e.g., file-sharing and collaboration tools) to host malware and phishing pages. The company's security team wants to block these threats without disrupting legitimate business use of the same services. Which strategy is most appropriate?

   • ARely on the cloud service providers' own security measures to automatically remove malicious content.
   • BBlock all access to cloud file-sharing and collaboration services from corporate devices.
   • CIncrease endpoint antivirus scanning frequency to catch malware after it is downloaded.
   • DUse cloud access security broker (CASB) policies to monitor and control access to these services, with real-time threat intelligence to flag malicious content.
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Which emerging cyber threat trend involves attackers exploiting trust in software supply chains to compromise multiple organizations at once?

   • ASpear phishing
   • BSupply chain compromise
   • CDistributed denial-of-service (DDoS) attacks
   • DCredential stuffing
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A legal firm is concerned about the increasing trend of ransomware operators exfiltrating data before encrypting it, and then threatening to publish the data if the ransom is not paid. The firm has a small IT team and a limited budget. Which measure is most effective to reduce the impact of this trend?

   • AMonitor the dark web for any mention of the firm's data to detect if it has been published.
   • BPurchase cyber insurance that covers ransom payments and data breach response costs.
   • CImplement data encryption at rest and in transit, and maintain offline backups of critical data.
   • DTrain employees to recognize phishing emails, which are the primary delivery method for ransomware.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A global manufacturing company has seen an increase in attacks targeting its industrial control systems (ICS). The attacks are believed to originate from nation-state actors who use custom malware that evades traditional antivirus. The company's IT and OT networks are connected for business reporting. The company has a limited budget and cannot afford to replace its legacy OT equipment. Which approach would best reduce the risk of a successful ICS attack?

   • AImplement a unidirectional gateway between the IT and OT networks to allow only one-way data flow for reporting.
   • BDeploy an antivirus solution on all OT systems and update signatures daily.
   • CIncrease the frequency of backups for OT systems and test restoration procedures.
   • DHire additional security analysts to monitor the OT network 24/7.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A healthcare organization is experiencing an increase in ransomware attacks that exploit remote desktop protocol (RDP) exposed to the internet. The organization has a mix of on-premises servers and cloud-based systems. The security team is small and cannot monitor all RDP connections. The organization must maintain remote access for clinicians and administrators. Which approach best balances security and operational needs?

   • AImplement a SIEM to monitor RDP logs and alert on failed login attempts.
   • BDisable RDP entirely and require all remote access to be performed through a third-party remote desktop tool.
   • CKeep RDP exposed but change the default port from 3389 to a non-standard port.
   • DReplace direct RDP exposure with a VPN gateway that requires multi-factor authentication (MFA) and implement network-level restrictions on RDP.
   Reveal Solution Discussion Select an answer first