1.5 Identify and Describe Threat Prevention Systems and Practices (e.g., End User Awareness, Security Updates, Antivirus, Intrusion Prevention Systems, Firewalls) CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company operates a legacy system that cannot be patched because the vendor no longer provides updates. The system is critical to operations and must remain accessible to a small group of internal users. The company has a firewall and an IPS. Which combination of measures would best reduce the risk of exploitation?

   • AIsolate the system on a separate network segment and restrict access with firewall rules
   • BDisable the IPS to avoid false positives on the legacy system
   • CProvide end user awareness training to all employees
   • DIncrease the frequency of antivirus scans on the legacy system
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is evaluating its antivirus solution. The current antivirus uses only signature-based detection and has missed several new malware variants. The company wants to improve detection of unknown threats without replacing the entire solution. Which enhancement would be most effective?

   • AEnable heuristic analysis in the antivirus settings
   • BDeploy an IPS to inspect all network traffic
   • CRequire all employees to attend a security awareness training
   • DIncrease the frequency of signature updates
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the main idea behind a defense-in-depth strategy?

   • ARelying on a single, powerful security control to stop all threats
   • BDeploying security controls only after an incident occurs
   • CUsing multiple layers of security controls so that if one fails, others still provide protection
   • DFocusing only on perimeter security and ignoring internal threats
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has implemented a security awareness program that includes regular phishing simulations. After several months, the click rate on simulated phishing emails has dropped significantly. Which additional benefit does this program provide beyond reducing clicks?

   • AIt eliminates the need for technical security controls
   • BIt helps identify employees who may need additional training
   • CIt automatically blocks malicious emails before they reach users
   • DIt guarantees that employees will never click on a real phishing email
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A network administrator notices that a server is receiving a high volume of traffic that matches a known exploit pattern. The administrator wants to block this traffic in real time before it reaches the server. Which control is specifically designed for this purpose?

   • AAntivirus software on the server
   • BIntrusion prevention system (IPS)
   • CFirewall with a default-deny rule
   • DEnd user awareness training
   Reveal Solution Discussion Select an answer first