1.5 Identify and Describe Threat Prevention Systems and Practices (e.g., End User Awareness, Security Updates, Antivirus, Intrusion Prevention Systems, Firewalls) CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company has a high rate of successful phishing attacks despite having an IPS and a firewall. The security team suspects that employees are not reporting suspicious emails. Which practice would most directly address this issue?

   • AEstablish a clear process for reporting suspicious emails and encourage employees to use it
   • BDisable the firewall's email-related rules to allow more traffic
   • CIncrease the sensitivity of the IPS to block more phishing emails
   • DRequire all employees to change their passwords weekly
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company's security team is designing a new security awareness program. The company has a high rate of phishing incidents, but employees are resistant to training because they find it time-consuming. The team wants to improve security without causing excessive disruption to productivity. Which approach best balances these competing needs?

   • AImplement short, interactive training modules and targeted phishing simulations
   • BEliminate training and instead increase the frequency of antivirus updates
   • CRely solely on technical controls such as email filtering and firewalls
   • DRequire all employees to complete a full-day security training course annually
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has a firewall that is configured to allow all outbound traffic and block all inbound traffic except for a specific management port. The security team wants to reduce the risk of malware communicating with command-and-control (C2) servers. Which firewall change would be most effective?

   • AIncrease the frequency of antivirus scans on the firewall
   • BDisable the firewall's logging to improve performance
   • CImplement outbound filtering to allow only necessary traffic and block known malicious destinations
   • DChange the management port to a different number
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is a key advantage of heuristic detection in antivirus software?

   • AIt guarantees that no false positives will occur
   • BIt requires no updates because it relies on static signatures
   • CIt can identify previously unknown malware by analyzing behavior or code patterns
   • DIt only works on cloud-based systems
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of end user awareness training in an organization's security program?

   • ATo replace technical security controls such as firewalls and antivirus software
   • BTo provide a legal defense if a data breach occurs
   • CTo reduce the likelihood that employees will fall for social engineering attacks like phishing
   • DTo enforce password complexity requirements on all user accounts
   Reveal Solution Discussion Select an answer first