6.5 Explain the Function of an Attack Surface Management (ASM) Platform CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An ASM platform has discovered a new internet-facing application. The security team needs to prioritize remediation efforts across hundreds of discovered assets. Which ASM feature should they use to determine which asset to address first?

   • ARisk scoring based on asset exposure, known vulnerabilities, and business criticality
   • BGeographic location of the hosting data center
   • CThe age of the asset in the ASM inventory
   • DAsset tagging based on the owner's department
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security team is integrating an ASM platform with their SIEM. They want to ensure that ASM alerts are correlated with other security events to identify potential attacks. What is the most important consideration for this integration?

   • AEnsuring that ASM alerts include asset context and risk scores so the SIEM can correlate them effectively
   • BConfiguring the ASM platform to send alerts only during business hours
   • CUsing the ASM platform as the primary alert source and disabling SIEM alerts
   • DSending ASM alerts to the SIEM in a plain text format for simplicity
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary function of an Attack Surface Management (ASM) platform?

   • ATo collect and analyze log data from endpoints to detect and respond to insider threats.
   • BTo block malicious traffic at the network perimeter using firewall rules and intrusion prevention.
   • CTo continuously discover, inventory, and assess an organization's internet-facing assets for security risks.
   • DTo manage user identities and enforce access control policies across cloud applications.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An ASM platform has identified a new internet-facing server with a known critical vulnerability. The server is not in the CMDB and appears to be used by a research team. The security team must decide how to handle this finding. What should they do first?

   • AAdd the server to the CMDB and close the ticket without further action
   • BImmediately block all traffic to the server at the firewall
   • CIgnore the finding because the server is not in the CMDB
   • DUse the ASM platform's risk score and asset context to determine if the server should be taken offline or patched
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An ASM platform has discovered a new internet-facing database that contains sensitive customer data. The security team needs to assess the risk of this asset quickly. Which information from the ASM platform would be most useful?

   • AThe number of open ports on the database
   • BThe date the asset was first discovered
   • CThe risk score, which combines exposure and known vulnerabilities
   • DThe IP address and hosting provider of the database
   Reveal Solution Discussion Select an answer first