6.5 Explain the Function of an Attack Surface Management (ASM) Platform CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How do ASM platforms typically discover an organization's internet-facing assets?

   • ABy scanning public IP ranges and domain names associated with the organization.
   • BBy querying the organization's cloud provider API for a list of all resources.
   • CBy reading the organization's firewall configuration and extracting allowed IP addresses.
   • DBy installing agents on every endpoint within the organization's network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is continuous monitoring important for an ASM platform?

   • ABecause it eliminates the need for any other security tools.
   • BBecause the external attack surface changes frequently as new assets are added or modified.
   • CBecause it allows the platform to automatically patch vulnerabilities.
   • DBecause it ensures that all internal assets are protected from insider threats.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A multinational company has multiple business units that each manage their own cloud accounts and domains. The central security team wants to gain a complete view of the external attack surface but lacks credentials to all accounts. They also need to avoid disrupting business operations. What should they do?

   • ARequire each business unit to provide a list of their internet-facing assets
   • BDeploy an internal vulnerability scanner on each business unit's network
   • CPerform a one-time external penetration test of all known IP ranges
   • DDeploy an ASM platform that uses non-intrusive discovery methods and integrates with cloud APIs where available
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has grown through acquisitions and suspects that several legacy domains and cloud resources are no longer actively managed. The security team wants to gain visibility into all internet-facing assets, including those that may be forgotten. What is the most effective approach using an ASM platform?

   • AAsk each business unit to submit a list of their internet-facing services
   • BConduct a one-time penetration test of all known IP addresses
   • CReview firewall rules to identify all allowed inbound connections
   • DPerform an initial discovery scan and then rely on continuous monitoring to detect changes over time
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   An organization has a mix of critical production assets and development environments. The ASM platform has discovered a new development server with a known vulnerability. The security team is considering whether to remediate it immediately. What should they consider?

   • AThe number of other assets with the same vulnerability
   • BThe cost of the ASM platform subscription
   • CThe age of the server and how long it has been in the inventory
   • DThe risk score assigned by the ASM platform, which accounts for exposure and business criticality
   Reveal Solution Discussion Select an answer first