6.5 Explain the Function of an Attack Surface Management (ASM) Platform CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is considering whether to invest in an ASM platform. They already have a vulnerability scanner and a firewall. What unique value does an ASM platform provide that these tools do not?

   • AAutomatically patching vulnerabilities on discovered assets
   • BReplacing the need for a firewall by blocking malicious traffic at the edge
   • CProviding a more detailed vulnerability scan of internal servers
   • DDiscovery and continuous monitoring of unknown internet-facing assets that are not managed by the organization
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team is evaluating an ASM platform and is concerned about alert fatigue. They want to ensure that only significant changes to the attack surface trigger alerts, while still maintaining comprehensive monitoring. Which configuration approach best addresses this concern?

   • AConfigure risk-based alerting thresholds so that only assets with a certain risk score trigger alerts
   • BSend all alerts to a separate email address that is checked weekly
   • CSet the ASM platform to scan only once a month to reduce the number of alerts
   • DDisable alerts for new assets and only alert on changes to existing assets
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A small company has a limited security team and wants to understand its external attack surface without deploying agents or requiring credentials to cloud accounts. What type of tool should they consider?

   • AA database activity monitoring tool
   • BA network access control (NAC) system
   • CAn endpoint detection and response (EDR) solution
   • DAn ASM platform that performs non-intrusive discovery of internet-facing assets
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security operations center (SOC) uses a SIEM platform for alert triage and a ticketing system for incident management. The team wants to ensure that ASM findings are automatically incorporated into their existing workflows. Which action should they take?

   • AConfigure the ASM platform to send alerts to the SIEM and create tickets in the ticketing system
   • BAsk the ASM vendor to provide a monthly summary of new assets
   • CReplace the SIEM with the ASM platform for all security monitoring
   • DManually export ASM reports weekly and email them to the SOC team
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which type of asset is an ASM platform specifically designed to uncover?

   • AShadow IT systems that are internet-facing but not managed by the IT department.
   • BInternal servers that are only accessible from the corporate LAN.
   • CData stored in on-premises databases that are not connected to the internet.
   • DEnd-user devices such as laptops and mobile phones.
   Reveal Solution Discussion Select an answer first