Vulnerability Management GSLC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a primary source for publicly disclosed vulnerability information?

   • APassword policy documents
   • BCVE database
   • CNetwork flow logs
   • DEmployee training records
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a valid remediation strategy for a vulnerability?

   • AIgnoring the vulnerability until a breach occurs
   • BDeleting all system logs to hide the vulnerability
   • CApplying a vendor-provided security patch
   • DIncreasing the number of user accounts
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security operations center (SOC) has observed an increase in attempts to exploit a specific vulnerability in a widely used software product. The vulnerability is not yet patched in the organization. The incident response team has been alerted. What is the most effective way to integrate vulnerability management with incident response in this situation?

   • AIncrease the frequency of vulnerability scans without changing remediation priorities.
   • BShare threat intelligence about the exploitation attempts with the vulnerability management team to prioritize remediation.
   • CDisable the software across the organization immediately.
   • DWait for the vendor to release a patch before taking any action.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A large organization has a vulnerability management program that scans all assets monthly. The latest scan identified a critical remote code execution vulnerability in a legacy application that is used by the research department. The application is not internet-facing, but it is connected to the corporate network. The vendor has released a patch, but the patch requires a reboot of the application server, which would cause downtime for the research team. The research team is in the middle of a critical project and cannot afford downtime. The organization has a compensating control in place: the application is behind a firewall that only allows access from the research department's subnet. The threat intelligence team reports that the vulnerability is being actively exploited in the wild, but only against internet-facing systems. What should the security manager recommend?

   • AAccept the risk and do not patch because the application is not internet-facing.
   • BRemove the firewall rule to allow broader access to the application to reduce the risk of exploitation.
   • CApply the patch during the next scheduled maintenance window, which is in two weeks, and continue to monitor the threat landscape.
   • DApply the patch immediately, even though it will cause downtime for the research team.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A vulnerability management analyst has patched a critical vulnerability on a server. Before closing the ticket, the analyst must verify that the patch was effective. Which action provides the most reliable verification?

   • ARun a targeted vulnerability scan against the server and confirm the vulnerability is no longer detected
   • BAsk the system administrator if the patch was applied
   • CReview the patch management tool's deployment report
   • DCheck the server's system uptime to ensure it was rebooted after patching
   Reveal Solution Discussion Select an answer first