Vulnerability and Threat Management GCIL Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A government agency has a mature vulnerability management program that includes quarterly scans and a monthly patching cycle. The incident leader wants to improve the program's ability to detect new vulnerabilities and emerging threats between scan cycles. Which enhancement would most effectively achieve this goal?

   • AImplement a continuous vulnerability management platform that integrates with threat intelligence feeds and provides real-time alerts for new vulnerabilities affecting the environment.
   • BRely on the patch management system to identify missing patches and assume that patching addresses all vulnerabilities.
   • CIncrease the frequency of vulnerability scans from quarterly to monthly.
   • DSubscribe to vendor security advisories and manually review them for relevant vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A vulnerability assessment on a corporate network identified a critical remote code execution vulnerability in an outdated application. The application is business-critical and cannot be patched immediately. What should the team do next to evaluate the actual risk?

   • AImmediately shut down the application to eliminate the vulnerability.
   • BCheck whether the application is exposed to untrusted networks and whether any compensating controls are in place.
   • CDocument the vulnerability and move on to the next scan.
   • DApply the vendor patch without testing to reduce the window of exposure.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A software company is developing a new customer-facing web application that will process payment card data. The application will be hosted in a public cloud environment. The security team is conducting a threat modeling exercise during the design phase. The team has identified that an attacker could exploit an injection vulnerability in the application's search function to access the underlying database. Which threat modeling output would best support the prioritization of security controls for this risk?

   • AA data flow diagram showing how payment data moves through the application, with trust boundaries marked.
   • BA risk register that rates each identified threat by likelihood and impact, considering existing compensating controls.
   • CA penetration test report that validates whether the injection vulnerability is actually exploitable in the deployed application.
   • DA list of all possible attack vectors against the application, ranked by the difficulty of exploitation.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which process is an example of continuous monitoring for new vulnerabilities?

   • AManual review of firewall rules
   • BAnnual penetration test
   • CScheduled vulnerability scans that run weekly
   • DOne-time network inventory
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which activity is an example of vulnerability identification during the preparation phase of incident response?

   • AReviewing firewall logs for blocked connection attempts
   • BConducting a tabletop exercise of the incident response plan
   • CRunning an authenticated vulnerability scan against production servers
   • DCollecting forensic images from a compromised host
   Reveal Solution Discussion Select an answer first