Explain How Security Controls Are Continually Tested and Gaps Are Remediated. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security assessment identified multiple gaps: a critical vulnerability in a legacy system that is scheduled for decommissioning in six months, a high-severity issue in a core business application, and a low-severity issue in a non-critical internal tool. The team has limited resources. Which approach best prioritizes remediation?

   • ARemediate the legacy system first because it is critical, regardless of decommissioning.
   • BRemediate the low-severity issue first because it is quick and easy.
   • CRemediate all issues simultaneously to ensure no gaps remain.
   • DRemediate the core business application issue first, then the legacy system, and finally the low-severity issue.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How do testing, gap identification, and remediation contribute to a continuous improvement cycle for security?

   • AEach cycle provides feedback that informs the next round of testing, leading to progressively stronger controls
   • BThey are one-time activities that, once completed, ensure the security posture remains effective forever
   • CThey only serve to satisfy compliance requirements and have no impact on actual security
   • DThey are independent processes that do not influence each other
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security team performs an annual penetration test and a quarterly vulnerability scan. After each test, they remediate the findings and consider the controls effective until the next test. A new malware campaign exploits a vulnerability that was patched in the test environment but not in production. What is the primary weakness in this approach?

   • AVulnerability scanning is not an acceptable methodology for evaluating control effectiveness.
   • BPenetration testing should be replaced with red teaming to improve detection of advanced threats.
   • CThe team should focus on patching production before testing new controls.
   • DThe testing cadence is too infrequent to catch emerging threats between scheduled tests.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is it important to test security controls against evolving threats rather than only against known historical attack patterns?

   • ABecause attackers continuously develop new techniques that may bypass controls that were effective against older attacks
   • BBecause regulatory standards require testing against zero-day exploits every week
   • CBecause historical attack patterns are no longer relevant to any organization
   • DBecause testing against evolving threats is the only way to achieve compliance with security certifications
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team has completed a remediation cycle: they tested controls, identified gaps, and fixed the most critical issues. They now want to ensure the organization's security posture continues to improve. What should they do next?

   • ASchedule the next round of testing and incorporate lessons learned into the security program.
   • BStop testing until a new threat emerges to save resources.
   • CReplace all security controls with new ones to ensure effectiveness.
   • DFocus only on remediating the remaining medium-severity issues.
   Reveal Solution Discussion Select an answer first