Use Common Methodologies for Risk and Detection Prioritization. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When prioritizing risks for remediation, which factor should be considered in addition to the risk score?

   • AThe name of the asset owner
   • BThe organizational context and business impact
   • CThe number of vulnerabilities found
   • DThe color of the risk dashboard
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which risk treatment option involves purchasing an insurance policy to cover potential losses from a security incident?

   • AAcceptance
   • BTransfer
   • CMitigation
   • DAvoidance
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In threat modeling, which of the following is the primary purpose of creating a data flow diagram (DFD)?

   • ATo document the organization's incident response procedures
   • BTo assign a severity score to each identified vulnerability
   • CTo visually represent how data moves through the system and identify trust boundaries
   • DTo calculate the financial impact of a potential breach
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A security operations center (SOC) has limited resources and must choose which detection use cases to implement. They have identified three potential use cases: (1) detection of credential dumping on domain controllers, (2) detection of unusual outbound network traffic, and (3) detection of unauthorized USB device usage. The organization has recently experienced a data breach involving credential theft. Which use case should be prioritized?

   • AImplement all three simultaneously to maximize coverage.
   • BDetection of credential dumping on domain controllers
   • CDetection of unusual outbound network traffic
   • DDetection of unauthorized USB device usage
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security engineer is threat modeling a new web application that handles sensitive user data. The team wants to systematically identify potential attack paths and map them to known adversary behaviors. Which approach best combines threat modeling with a framework that catalogs adversary techniques?

   • AUse a vulnerability scanner to find CVEs and then patch them all.
   • BUse STRIDE to identify threats, then map each threat to relevant MITRE ATT&CK techniques.
   • CUse a qualitative risk matrix to assign likelihood and impact to each asset.
   • DUse only MITRE ATT&CK to list all possible techniques and assume they all apply.
   Reveal Solution Discussion Select an answer first