A company is profiling the risk of a customer relationship management (CRM) application. The application has a vulnerability that allows unauthorized access to customer data, but it requires a valid user account. The company has a policy of not enforcing password complexity. Threat intelligence shows an increase in phishing attacks targeting employees. Which factor most increases the likelihood of this vulnerability being exploited?

The vulnerability is in the application code and is high severity

The CRM application is only used by a small team

The company has a strong security awareness training program

The lack of password complexity makes it easier for attackers to guess or crack credentials

A security team is using a qualitative risk matrix with likelihood ratings (Low, Medium, High) and impact ratings (Low, Medium, High). They have identified a risk with a Medium likelihood and High impact. The team is debating whether to use a quantitative analysis to support their decision. Which of the following is a valid reason to supplement the qualitative assessment with a quantitative analysis?

To eliminate the need for expert judgment

To reduce the likelihood of the risk

To replace the qualitative matrix entirely

To provide a more precise estimate of the potential financial loss

A security team is analyzing threat modeling data to profile the risk of a new internal web application. They have access to a vulnerability database that lists a critical remote code execution flaw in the web server software, but they have no information about whether the application is exposed to the internet or if any attackers are actively targeting it. Which additional data source would be most valuable to complete the risk profile?

A list of security policies and procedures

Network telemetry showing traffic patterns and any attempts to reach the application

A qualitative risk assessment matrix

Asset inventory listing the hardware specifications of the server

Which source of threat modeling data provides real-time information about active attack campaigns and indicators of compromise observed across the internet?

Configuration management database (CMDB)

F5Certified Solution Expert, Security

Domain 1Objective 2

1.02 Analyze Threat Modeling Data to Determine Risk Profiles of the Infrastructure and Applications 401 Practice Questions (Page 3)

Part of the THREAT ANALYSIS domain, which makes up ~11% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

6concepts

Questions 11–15

11application · medium
A company is profiling the risk of a customer relationship management (CRM) application. The application has a vulnerability that allows unauthorized access to customer data, but it requires a valid user account. The company has a policy of not enforcing password complexity. Threat intelligence shows an increase in phishing attacks targeting employees. Which factor most increases the likelihood of this vulnerability being exploited?
Select an answer first
12expert · hard
A security team is using a qualitative risk matrix with likelihood ratings (Low, Medium, High) and impact ratings (Low, Medium, High). They have identified a risk with a Medium likelihood and High impact. The team is debating whether to use a quantitative analysis to support their decision. Which of the following is a valid reason to supplement the qualitative assessment with a quantitative analysis?
Select an answer first
13application · medium
A security team is analyzing threat modeling data to profile the risk of a new internal web application. They have access to a vulnerability database that lists a critical remote code execution flaw in the web server software, but they have no information about whether the application is exposed to the internet or if any attackers are actively targeting it. Which additional data source would be most valuable to complete the risk profile?
Select an answer first
14foundation · easy
In a risk profile, which component is used to estimate how often a threat event is expected to occur?
Select an answer first
15foundation · easy
Which source of threat modeling data provides real-time information about active attack campaigns and indicators of compromise observed across the internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

1.02 Analyze Threat Modeling Data to Determine Risk Profiles of the Infrastructure and Applications 401 Practice Questions (Page 3)

Questions 11–15

In a risk profile, which component is used to estimate how often a threat event is expected to occur?

Which source of threat modeling data provides real-time information about active attack campaigns and indicators of compromise observed across the internet?

Keep studying — THREAT ANALYSIS