Threats and Vulnerabilities CDPSE Practice Questions (Page 5)

Questions 21–24

1. 21application · medium

   An e-commerce company has a public-facing website that collects customer names, addresses, and payment information. The security team notices unusual traffic patterns indicating a potential automated bot attack. Which of the following is the most likely threat to the privacy of customer data?

   • AA distributed denial-of-service attack overwhelming the website
   • BA web scraping bot harvesting customer data from the website
   • CA brute-force attack on the website's login page
   • DA phishing attack targeting website administrators
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is the BEST example of a threat to privacy data?

   • AThe privacy policy does not specify how long personal data will be retained.
   • BAn employee accidentally emails a spreadsheet of customer personal data to the wrong recipient.
   • CA database containing personal data lacks encryption at rest.
   • DA hacker group is known to target organizations in the same industry with ransomware attacks.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A retail company stores customer payment data in a database that is accessible from the internet. The database has been flagged as vulnerable to SQL injection. Which of the following is the most effective mitigation strategy to reduce the risk of data exposure?

   • AConducting regular backups of the database
   • BImplementing input validation and parameterized queries in the application
   • CEncrypting the database at rest
   • DImplementing multi-factor authentication for database administrators
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has identified two risks: (1) a high-likelihood, low-impact risk of unauthorized access to a public marketing database, and (2) a low-likelihood, high-impact risk of a data breach of a database containing customer financial data. The company has a limited budget for mitigation. Which risk should be prioritized?

   • ABoth equally because all risks must be addressed
   • BThe marketing database risk because it is more likely to occur
   • CThe financial data breach because the impact is severe, even if likelihood is low
   • DNeither because the risks are not yet realized
   Reveal Solution Discussion Select an answer first