Explain How Security Controls Are Continually Tested and Gaps Are Remediated. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When prioritizing security gaps for remediation, which factor should be considered first?

   • AThe risk severity of the gap, including the likelihood of exploitation and potential impact
   • BThe ease of fixing the gap, regardless of its potential impact
   • CThe preference of the security team, based on their familiarity with the technology
   • DThe number of systems affected, even if the risk is low
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team has identified a high-severity vulnerability in a legacy application that is critical to business operations. The vendor no longer provides patches. The team has limited budget and must choose a remediation strategy. Which approach is most appropriate?

   • AUpgrade the application to the latest version, even if it requires significant reconfiguration.
   • BDecommission the application immediately to eliminate the vulnerability.
   • CImplement compensating controls, such as network segmentation and strict access controls, to reduce the risk.
   • DAccept the risk without any action because the vendor does not provide patches.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A vulnerability scan identified several issues: a critical remote code execution vulnerability on an internet-facing web server, a high-severity SQL injection flaw in a customer-facing application, and a medium-severity missing patch on an internal file server. The security team has limited resources and must prioritize remediation. Which vulnerability should be addressed first?

   • AThe medium-severity missing patch on the internal file server
   • BThe high-severity SQL injection in the customer-facing application
   • CThe critical remote code execution on the internet-facing web server
   • DAll should be remediated simultaneously regardless of resources
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   After a major security incident, the team conducts a post-incident review and identifies that a specific security control failed to detect the attack. They implement a new detection rule and verify it works. What is the next step to complete the continuous improvement cycle?

   • AWait for the next incident to test the new rule.
   • BUpdate the security testing plan to include scenarios that would exercise the new rule.
   • CRemove the failed control from the environment.
   • DConsider the incident closed and move on to other tasks.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of tracking the progress of remediation actions?

   • ATo create a record that can be used to penalize employees who do not complete fixes quickly enough
   • BTo ensure that planned fixes are implemented on schedule and to identify any obstacles that may delay closure
   • CTo prove to auditors that all gaps have been fixed, even if they have not been
   • DTo eliminate the need for re-testing after remediation is complete
   Reveal Solution Discussion Select an answer first