Defensive Technologies and Emerging Intelligence GISF Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a defense-in-depth practice?

   • ARelying solely on antivirus software to protect all systems
   • BUsing a strong password policy but no other security measures
   • CUsing a firewall, an intrusion prevention system, and endpoint protection together
   • DEncrypting all data but not using any access controls
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team is reviewing threat intelligence feeds to prioritize defenses. One feed reports a new ransomware family that targets exposed RDP services. Another feed reports a zero-day vulnerability in a widely used email client. The team has limited resources. Which action best uses this intelligence to improve defenses?

   • AIncrease the frequency of antivirus signature updates.
   • BPurchase additional threat intelligence feeds to get more information.
   • CBlock inbound RDP traffic at the firewall and apply the email client patch if available.
   • DDisable the email client entirely to prevent exploitation.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company is designing a defense-in-depth strategy for a new cloud-based application. The application will handle sensitive customer data and must comply with data residency requirements. The company has a limited budget and must choose between several controls. Which combination provides the most balanced defense-in-depth while addressing data residency?

   • AA single strong firewall and a VPN for all access.
   • BNetwork segmentation, encryption of data at rest and in transit, and multi-factor authentication for all users.
   • CAn intrusion detection system (IDS) and a log management system.
   • DEncryption of data at rest only, and a strong password policy.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary function of antivirus software on an endpoint device?

   • ATo control which applications users can install
   • BTo detect and remove malware that has infected the device
   • CTo monitor network traffic for suspicious activity
   • DTo encrypt all files stored on the device
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a zero-day exploit?

   • AAn attack that targets only outdated operating systems
   • BAn attack that exploits a previously unknown vulnerability for which no patch is available
   • CAn attack that uses only publicly known vulnerabilities
   • DAn attack that occurs at midnight on the day a patch is released
   Reveal Solution Discussion Select an answer first