6.5 Explain the Function of an Attack Surface Management (ASM) Platform CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security team wants to automate the remediation of ASM findings. They have a SOAR platform that can orchestrate responses. Which integration would enable the team to automatically create and assign tasks based on ASM alerts?

   • AExport ASM findings to a spreadsheet and email them to the team
   • BUse the ASM platform's built-in vulnerability scanner to patch assets automatically
   • CIntegrate the ASM platform with the SOAR platform via API
   • DConfigure the ASM platform to send alerts to a public Slack channel
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a key capability of ASM platforms regarding changes to the attack surface?

   • AThey continuously monitor and alert on new or modified internet-facing assets.
   • BThey perform a one-time scan during initial deployment and then stop.
   • CThey require manual intervention to detect any changes in the environment.
   • DThey only monitor assets that are already known and documented.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company recently discovered that a developer had deployed a public-facing test server on a cloud account that is not managed by the IT team. The security team wants a way to continuously identify similar unknown assets across all cloud accounts and on-premises networks. Which capability of an ASM platform should they rely on?

   • AReal-time endpoint detection and response on all managed devices
   • BAutomated discovery of internet-facing assets using non-intrusive scanning and certificate transparency logs
   • CManual review of firewall logs to identify new external connections
   • DVulnerability scanning of internal servers using an on-premises scanner
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which factor is commonly considered when an ASM platform classifies a discovered asset?

   • AThe asset's color and manufacturer.
   • BThe asset's physical location within the data center.
   • CThe asset's purchase date and warranty status.
   • DThe asset's function, such as web server, database, or application.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How does an ASM platform typically integrate with a Security Information and Event Management (SIEM) system?

   • ABy replacing the SIEM's log collection and analysis capabilities.
   • BBy blocking malicious traffic based on SIEM alerts.
   • CBy sending alerts and asset risk data to the SIEM for correlation with other security events.
   • DBy installing agents on the SIEM server to scan for vulnerabilities.
   Reveal Solution Discussion Select an answer first