Cyber Threat Trends and Challenges TIE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A university's research department has seen an increase in attacks that exploit unpatched vulnerabilities in internet-facing web applications. The department frequently deploys new applications for experiments and often forgets to update them. The central IT team is small and cannot manually track every application. Which approach would best address this trend?

   • ARequire all research applications to be hosted on a separate network segment with no internet access.
   • BImplement a strict change management process that requires security review before any application is deployed.
   • CSend a monthly email reminder to researchers to update their applications.
   • DDeploy a web application firewall (WAF) in front of all internet-facing applications and enable virtual patching rules.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A financial institution is facing an increasing number of sophisticated phishing attacks that bypass its email gateway. The security team is small and has limited experience with threat hunting. The institution has a regulatory requirement to report security incidents within 72 hours. The team is considering whether to invest in an endpoint detection and response (EDR) tool or a managed detection and response (MDR) service. Which option best addresses the skill gap and the reporting requirement?

   • ADeploy an EDR tool and assign the existing security team to monitor alerts and conduct investigations.
   • BUpgrade the email gateway to a more expensive model with advanced threat protection.
   • CEngage an MDR service that provides 24/7 monitoring, incident investigation, and assistance with regulatory reporting.
   • DPurchase a threat intelligence platform (TIP) and rely on the team to correlate alerts manually.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A university's IT department is facing a growing number of ransomware attacks targeting its research data. The department has a small security team and limited funding. Which combination of measures is most effective to reduce the impact of a potential ransomware attack?

   • AIncrease the security team's budget to hire additional incident responders.
   • BPurchase a commercial threat intelligence feed and integrate it with the firewall to block known ransomware command-and-control domains.
   • CImplement regular offline backups and test restoration procedures, and provide phishing awareness training to staff and students.
   • DDeploy a next-generation firewall with intrusion prevention and enable strict application control.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A multinational corporation is facing a rise in insider threat incidents, including data exfiltration by employees using personal cloud storage and USB drives. The company must comply with data protection regulations that require monitoring of access to sensitive data. The security team is concerned about employee privacy and wants to avoid a heavy-handed approach. Which strategy best balances security, compliance, and privacy?

   • AMonitor all employee activity, including keystrokes and screen captures, to detect potential data exfiltration.
   • BImplement a data loss prevention (DLP) solution that monitors and blocks unauthorized transfers of sensitive data, with clear policies and user notifications.
   • CDisable all USB ports and block access to personal cloud storage services on corporate devices.
   • DRely on annual security awareness training to remind employees not to exfiltrate data.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A large enterprise is facing a growing number of zero-day exploits targeting its web applications. The security team is small and cannot keep up with the volume of patches from multiple vendors. The enterprise must maintain high availability of its customer-facing applications. Which strategy is most effective to reduce the risk from zero-day exploits?

   • ATake the web applications offline until patches are available.
   • BHire additional security staff to manually review and patch all applications.
   • CDeploy a web application firewall (WAF) with virtual patching capabilities and use threat intelligence to create rules that mitigate known attack patterns.
   • DIncrease the frequency of vulnerability scans to identify and patch zero-day vulnerabilities faster.
   Reveal Solution Discussion Select an answer first