Vulnerability and Threat Management GCIL Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which remediation action is most appropriate for a vulnerability that has no available patch?

   • AUninstall the affected software
   • BIncrease the CVSS score
   • CApply a compensating control
   • DIgnore the vulnerability until a patch is released
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which structured threat modeling methodology uses a data flow diagram to identify threats by examining how data moves through a system?

   • ACVSS
   • BMITRE ATT&CK
   • CSTRIDE
   • DPASTA
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is conducting a vulnerability assessment of a critical application. An authenticated scan has identified a SQL injection vulnerability in a legacy module. The team also has threat intelligence indicating that this specific vulnerability is being actively exploited in the wild. The application is scheduled for decommissioning in six months. The incident leader must decide how to handle this finding. Which approach is most appropriate?

   • AAccept the risk because the application is being decommissioned in six months.
   • BDocument the finding and include it in the next quarterly report without immediate action.
   • CAccelerate the decommissioning timeline to one month and defer remediation.
   • DImmediately remediate the SQL injection vulnerability by applying a vendor patch or implementing a WAF rule.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of a vulnerability assessment?

   • ATo actively exploit vulnerabilities to gain access to systems
   • BTo remove malware from infected systems
   • CTo map an organization's network topology
   • DTo evaluate the severity and exploitability of identified weaknesses
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A multinational corporation operates in multiple regions with different data protection regulations. The security team receives threat intelligence from various sources, including government advisories, commercial feeds, and industry ISACs. The incident leader is responsible for integrating this intelligence into the vulnerability management program. The team has limited resources and cannot analyze all intelligence sources equally. Which approach should the incident leader take to maximize the value of threat intelligence integration?

   • APrioritize the analysis of intelligence sources that are most relevant to the company's industry and geographic regions.
   • BAnalyze all intelligence sources equally to ensure no relevant threat is missed.
   • CFocus exclusively on government advisories because they are the most authoritative sources.
   • DAutomate the integration of all intelligence feeds into the vulnerability scanner and rely on automated correlation.
   Reveal Solution Discussion Select an answer first