6.5 Explain the Function of an Attack Surface Management (ASM) Platform CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security analyst is configuring an ASM platform and wants to ensure that the team is notified when a new cloud storage bucket is made public. Which ASM feature should they enable?

   • AIntegration with the company's CMDB to track asset ownership
   • BA one-time discovery scan of the company's domain
   • CA report of all assets with high risk scores
   • DContinuous monitoring with alerts for new or changed external assets
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of assigning a risk score to an asset in an ASM platform?

   • ATo prioritize remediation efforts based on the asset's exposure and vulnerability.
   • BTo classify the asset as either 'production' or 'development'.
   • CTo automatically block access to the asset from the internet.
   • DTo determine the asset's monetary value for insurance purposes.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security team has deployed an ASM platform and discovered a large number of assets that are not in the CMDB. The team is overwhelmed by the volume of findings and needs to prioritize. What is the most effective way to use the ASM platform to manage this situation?

   • AUse the ASM platform's risk scoring and asset classification to focus on the highest-risk unknown assets first
   • BDisable alerts for unknown assets until the team has time to review them
   • CAdd all unknown assets to the CMDB immediately
   • DAsk the ASM vendor to reduce the number of discovered assets
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst notices that the ASM platform has alerted on a new subdomain that resolves to an IP address not previously seen in the inventory. The analyst wants to understand the context and decide if action is needed. Which ASM capability is most directly useful in this situation?

   • AA dashboard showing the total number of assets discovered over time
   • BIntegration with a ticketing system to automatically create a low-priority ticket
   • CA report of all assets that have not been scanned in the last 90 days
   • DContinuous monitoring that detects and alerts on new or changed external assets
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security team is configuring an ASM platform and wants to ensure that they are alerted when a new subdomain is created that could be used for phishing. They also want to avoid alerts for subdomains that are part of normal operations. What should they configure?

   • AUse a third-party DNS service to block new subdomains automatically
   • BAlert on all new subdomains without any filtering
   • CSet up continuous monitoring for new subdomains and apply risk-based alerting to filter out low-risk ones
   • DDisable monitoring for subdomains and only monitor IP addresses
   Reveal Solution Discussion Select an answer first