1.5 Identify and Describe Threat Prevention Systems and Practices (e.g., End User Awareness, Security Updates, Antivirus, Intrusion Prevention Systems, Firewalls) CYBERSECURITY-APPRENTICE Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard · select all that apply

   A company is designing a comprehensive security strategy. Which of the following are examples of defense-in-depth practices? (Select all that apply.)

   • AProviding end user awareness training and conducting phishing simulations
   • BRelying solely on a firewall for all security needs
   • CApplying security updates promptly and using antivirus with heuristic detection
   • DUsing a firewall to filter traffic and an IPS to inspect allowed traffic
   • EDisabling security controls that are not fully effective
   Check answers Discussion Select an answer first
2. 27expert · hard

   A company has a policy to apply security updates within 48 hours for critical vulnerabilities. However, a critical update for a database server requires a reboot that will cause a brief outage. The database is used by a customer-facing application, and the company wants to minimize downtime. What is the best approach?

   • AApply the update during a scheduled maintenance window and communicate the outage to stakeholders
   • BApply the update without a reboot and hope it takes effect
   • CDisable the database server's antivirus to free up resources for the update
   • DDelay the update until the next major release to avoid the reboot
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which practice is commonly used to reinforce end user awareness of phishing threats?

   • ARunning simulated phishing campaigns to test and educate employees
   • BDeploying a network-based intrusion prevention system
   • CApplying the latest security patches to all endpoints
   • DConfiguring a firewall to block malicious IP addresses
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An employee downloads a file from the internet. The antivirus software on the employee's computer does not flag the file because it has never been seen before. However, the antivirus later detects the file as malicious after analyzing its behavior. Which detection method is the antivirus using?

   • AHeuristic analysis
   • BSignature-based detection
   • CFirewall rule inspection
   • DPatch management
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A small company recently suffered a ransomware attack that started when an employee clicked a malicious link in a phishing email. The company already has a firewall and antivirus software installed. The security team wants to reduce the likelihood of similar incidents. Which additional measure would be most effective as the next step?

   • ADeploy an intrusion prevention system (IPS) to inspect all inbound email traffic
   • BDisable all external email links until further notice
   • CConduct regular end user awareness training with phishing simulations
   • DIncrease the frequency of antivirus signature updates to every hour
   Reveal Solution Discussion Select an answer first