Vulnerability and Threat Management GCIL Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has identified a critical vulnerability in a custom-built application that is essential to business operations. The vulnerability cannot be patched because the application is no longer supported by the original developer. The application is accessible only from the internal network. The incident leader must develop a remediation plan. Which combination of controls would provide the most effective risk reduction?

   • AIncrease logging and monitoring of the application and rely on detection rather than prevention.
   • BDisable the application and migrate all users to a manual process.
   • CImplement network segmentation to restrict access to the application and add an application-layer firewall to filter traffic.
   • DAccept the risk because the application is only accessible from the internal network.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When communicating vulnerability findings to executive leadership, what is the most important aspect to emphasize?

   • ATechnical details of the exploit code
   • BThe exact CVSS score of each vulnerability
   • CThe names of the security researchers who discovered the vulnerabilities
   • DBusiness risk and recommended actions
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A vulnerability scan reveals two critical vulnerabilities: one on a public-facing web server that is protected by a WAF and one on an internal database that is only accessible from the internal network. The database contains sensitive customer data. The team has limited patching resources and can only patch one system this week. Which vulnerability should be patched first?

   • AThe public web server, because it is exposed to the internet.
   • BPatch neither until a full risk assessment is completed.
   • CPatch both at the same time by reallocating resources.
   • DThe internal database, because it contains sensitive data and has no compensating controls.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which combination of factors is typically used to calculate risk for a vulnerability?

   • AExploitability and CVSS score
   • BThreat and asset value
   • CLikelihood and impact
   • DVulnerability and patch availability
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security operations center receives a vulnerability scanner report listing hundreds of findings. The team wants to focus on vulnerabilities that are actively being exploited in the wild. Which source of information would best support this prioritization?

   • AAsk the system administrators which vulnerabilities they think are most dangerous.
   • BSubscribe to threat intelligence feeds that track active exploit activity and weaponized exploits.
   • CWait for the next scheduled scan to see if the findings change.
   • DReview the CVSS base scores for all findings and remediate the highest scores first.
   Reveal Solution Discussion Select an answer first