A security team must prioritize responses to two threats. Threat A is a vulnerability in a legacy system that is not internet-facing but is critical to operations. Threat B is a vulnerability in an internet-facing web server that is not critical. Both vulnerabilities have public exploits available. Which threat should be prioritized?

Both equally, because both have public exploits

Threat A, because legacy systems are harder to patch

Threat A, because the system is critical to operations

Threat B, because it is internet-facing and has a public exploit

A security team has limited resources and must prioritize responses to two threats. Threat 1 is a zero-day vulnerability in a widely used VPN appliance that is being exploited in the wild. Threat 2 is a new ransomware variant that is not yet widespread but is expected to increase. The team can only fully address one threat this week. Which threat should they prioritize?

Threat 1, but only if the VPN appliance is internet-facing

Threat 2, because ransomware is always more damaging

Threat 1, because it is actively exploited and affects a critical system

Threat 2, because it is expected to increase in the future

A company is assessing the impact of a new vulnerability in a widely used email server. The vulnerability allows an attacker to send emails as the company's domain. The company uses this email server for all internal and external communication. What is the most significant potential impact?

Loss of customer trust due to phishing emails appearing to come from the company

Legal consequences from data breach

Direct financial loss from the attacker accessing the email server

An organization processes credit card transactions. A threat report indicates a new point-of-sale (POS) malware is targeting the payment processing software used by the organization. What is the most direct impact of this threat on the organization?

Potential compromise of customer payment data

A small business has a limited security budget and wants to stay informed about threats relevant to their industry. They are considering subscribing to a commercial threat intelligence feed, but they are unsure if it is worth the cost. Which alternative source would provide credible, free threat information?

Social media posts from unknown security researchers

Government cybersecurity advisories

F5Certified Solution Expert, Security

Domain 1Objective 1

1.01 Analyze External Threat Research to Determine the Potential Impact to an Organization 401 Practice Questions (Page 1)

Part of the THREAT ANALYSIS domain, which makes up ~11% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

Questions 1–5

1expert · hard
A security team must prioritize responses to two threats. Threat A is a vulnerability in a legacy system that is not internet-facing but is critical to operations. Threat B is a vulnerability in an internet-facing web server that is not critical. Both vulnerabilities have public exploits available. Which threat should be prioritized?
Select an answer first
2expert · hard
A security team has limited resources and must prioritize responses to two threats. Threat 1 is a zero-day vulnerability in a widely used VPN appliance that is being exploited in the wild. Threat 2 is a new ransomware variant that is not yet widespread but is expected to increase. The team can only fully address one threat this week. Which threat should they prioritize?
Select an answer first
3expert · hard
A company is assessing the impact of a new vulnerability in a widely used email server. The vulnerability allows an attacker to send emails as the company's domain. The company uses this email server for all internal and external communication. What is the most significant potential impact?
Select an answer first
4foundation · easy
An organization processes credit card transactions. A threat report indicates a new point-of-sale (POS) malware is targeting the payment processing software used by the organization. What is the most direct impact of this threat on the organization?
Select an answer first
5application · medium
A small business has a limited security budget and wants to stay informed about threats relevant to their industry. They are considering subscribing to a commercial threat intelligence feed, but they are unsure if it is worth the cost. Which alternative source would provide credible, free threat information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

1.01 Analyze External Threat Research to Determine the Potential Impact to an Organization 401 Practice Questions (Page 1)

Questions 1–5

A company is assessing the impact of a new vulnerability in a widely used email server. The vulnerability allows an attacker to send emails as the company's domain. The company uses this email server for all internal and external communication. What is the most significant potential impact?

An organization processes credit card transactions. A threat report indicates a new point-of-sale (POS) malware is targeting the payment processing software used by the organization. What is the most direct impact of this threat on the organization?

Keep studying — THREAT ANALYSIS