Threats, Vulnerabilities, and Mitigations Assessment (Domain 2.0) Practice Test

These questions are part of the practice quiz. Start practicing

• What is the MOST plausible cause of increased server resource consumption and unusual behavior within server logs?
• How do qualitative risk assessments differ from quantitative assessments?
• What is phishing primarily used for?
• What does application security mainly focus on?
• What characterizes an insider threat?
• A prominent corporation has experienced a spike in unauthorized network traffic aimed at its web servers after a controversial policy decision. Which type of attacker is MOST likely responsible?
• Which principle dictates that users should have minimal access needed for their roles?
• What role does monitoring play in security risk management?
• What term refers to a previously unknown software exploit that can be used by an attacker before developers are aware of the risk?
• How does social engineering pose a security risk?
• In cybersecurity terms, what does the process of risk management entail?
• What kind of people are often behind hacktivism?
• Which of the following best describes a vulnerability?
• What is the purpose of continuous monitoring in IT security?
• What is a typical characteristic of a credential replay attack?
• What is a Man-in-the-Middle (MitM) attack?
• In which phase of the cyber kill chain would an attacker typically use malware?
• What is the primary distinction between a threat and a vulnerability?
• Which term describes a discrepancy between actual and required security measures?
• Which of the following best describes an exploit?
• What capability does AI offer to aid in threat detection that traditional methods may lack?
• A company's IT team detects an anomaly in a cloud environment after a software update. What should be their first action?
• Which of the following is a common method of data exfiltration?
• When evaluating the risks of jailbroken devices, what factor is essential for organizations?
• What are zero-day vulnerabilities?
• What does the term "mitigation" refer to?
• What does "social engineering" refer to in cybersecurity?
• Which of the following is an outcome of effective threat intelligence?
• What role does assessment play in managing threats and vulnerabilities?
• Which method is used to improve an organization's incident response?
• What does threat hunting involve?
• What might a company experience as a result of a data breach?
• What is the primary responsibility of a Chief Information Security Officer (CISO)?
• What characterizes a threat model in cybersecurity?
• Which of the following is NOT a benefit of data encryption?
• How does log management contribute to security?
• Why are jailbroken phones more susceptible to malware infections?
• What is the primary purpose of a security policy?
• What is a security patch primarily designed to do?
• What describes the involvement of a state-sponsored entity in cyberattacks against a corporation for political reasons?
• Which of the following best defines the concept of "diversity of defense" in cybersecurity?
• What is the main outcome of effective risk assessment?
• A group of threat actors disrupts an oil company's online services due to disagreement with its practices. This type of threat actor is primarily motivated by what?
• What characterizes a zero-day vulnerability?
• What is the main goal of security awareness training?
• An attacker gains access to a restaurant's router by reviewing device documentation online. Which attack is most likely occurring?
• What should be the first course of action for an analyst noticing critical devices running end-of-life operating systems?
• What effect do jailbroken devices have on corporate security measures?
• What does a brute force attack attempt to achieve?
• What would be the next step after discovering a breach indicating credential replay?
• Which of the following should companies assess regarding their BYOD policy?
• What does jailbreaking a device typically allow users to do?
• What is the primary purpose of data encryption?
• Which cryptographic issue is considered a vulnerability if misconfigured?
• How is a security incident defined?
• At what stage do attackers carry out their intended actions in the cyber kill chain?
• What is the primary goal of threat intelligence?
• What is the primary goal of business continuity planning?
• What is the purpose of threat hunting?
• What is a Common Vulnerability and Exposure (CVE)?
• Which action is essential when responding to detected unusual website activity in an e-commerce setting?
• What action can address security concerns regarding Instant Messaging (IM) services in an organization?
• What role do third-party vendors play in security vulnerability?
• What is the role of a security breach response team?
• What are insider threats?
• What aspect of security does an effective incident recovery plan address?
• Which of the following is a risk associated with employees using jailbroken smartphones under a Bring Your Own Device (BYOD) policy?
• What is one outcome of effectively implementing diversity of defense?
• What does the acronym CIA represent in information security?
• An e-commerce company detects unusual activities on its site. What is the most effective action for future issue identification?
• How can companies mitigate risks associated with employee-owned devices?
• What does 'cube vulnerability' refer to?
• What is an example of a threat?
• What is the primary goal of application security?
• How does encryption contribute to data security?
• What kind of approach does "diversity of defense" encourage in security practices?
• What is the significance of a Security Information and Event Management (SIEM) system?
• How do state-sponsored attacks typically differ from other cyber threats?
• Which of the following is NOT a component of the CIA triad?
• What is the most effective strategy for mitigating risks associated with unsupported software?
• What is the primary function of intrusion detection systems (IDS)?
• How do threat actors differ from threats?
• What is the MOST effective strategy for mitigating risks related to hardware and firmware security vulnerabilities in a large corporation's network?
• What is the significance of employing a diversity of defense strategy?
• Which of the following attacks aims to make a service unavailable by overwhelming it with traffic?
• Which of the following is an example of a physical security threat?
• What does an atypical spike in total outbound DNS traffic from a network-attached device suggest?
• What is the primary role of a firewall in an organization?
• Which of the following is a key element of developing application security?
• What is a potential outcome of allowing jailbroken devices in the workplace?
• Why is network segmentation important for large organizations?
• What is a common reason employees choose to use rooted smartphones?
• In the context of Threats, Vulnerabilities, and Mitigations, how is "risk" best defined?
• What is a denial-of-service (DoS) attack?
• What stage does the cyber kill chain begin with?
• Why are regular security patch updates important?
• Who is referred to as a threat actor?
• Why is threat modeling important?
• What does a security policy outline?
• What is a security audit?
• How does encryption help mitigate security threats?
• What proactive approach does threat hunting take?
• An organization has identified that its website is being flooded with login credentials. Which of the following BEST describes the observed cyber attack?
• What should a security specialist do to improve device security and limit sideloaded apps on government-owned mobile devices?
• What does a vulnerability assessment aim to achieve?
• What is the main goal of incident response planning?
• What advantage does network segmentation provide in terms of security?
• What is a security control?
• What does BYOD stand for in corporate settings?
• A global technology firm detects unauthorized access to its proprietary designs. What type of data exfiltration is this an example of?
• What role does patch management play in cybersecurity?
• Which of the following is a mitigation strategy for denial of service attacks?
• What is the focus of endpoint security?
• How do denial of service attacks affect system availability?
• What does a threat model represent?
• What is the primary difference between a threat and a vulnerability?
• What does application security aim to achieve?
• What does the CIA triad stand for?
• What type of assessment focuses on the significance of potential threats and vulnerabilities?
• What does "always-on security" refer to?
• What is the result of inadequate log management?
• What are some common types of vulnerabilities found in software?
• What type of attack involves a fraudulent email that appears to come from a trusted colleague requesting sensitive financial information?
• Which two actions should a system administrator prioritize to address potential misconfigurations in cryptographic techniques?
• Why is it vital for organizations to evaluate employee devices regularly?
• What security anomaly may be indicated when an employee's account shows access from geographically distant locations within a short period, without secure remote access tools?
• What technique does a threat actor use to send malicious files via a Bluetooth network attack?
• What is associated with vulnerabilities within hypervisor software?
• What is the definition of vulnerability disclosure?
• What is the primary goal of implementing a scheduled maintenance plan for networked systems in a production environment?
• How can artificial intelligence (AI) assist in threat detection?
• The cybersecurity team discovers evidence of a successful malicious cryptographic attack due to a misconfiguration. What is the MOST appropriate initial response?
• Which of the following is NOT a common form of malware?
• What primarily motivates an employee to leak confidential information due to ethical concerns?
• What does business continuity planning prioritize during a crisis?
• What security risks are associated with allowing employees to use jailbroken or rooted smartphones in a BYOD policy?
• Why is user education essential for security?
• What is malware designed to do?
• What do threat intelligence feeds provide to organizations?
• What attack strategy is used during a distributed denial of service (DDoS) attack that makes services inaccessible for legitimate users?
• In cybersecurity, what is "exploitation"?
• What term refers to the path an individual or group can use to execute a data exfiltration, service disruption, or disinformation attack?
• Which of the following is a consequence of data breaches?
• What is a potential consequence of failing to conduct vulnerability disclosure?
• What is the primary objective of vulnerability scanning?
• What does a comprehensive risk assessment typically include?
• An environmental advocacy group uses cyber weapons against companies. What type of threat actor does this represent?
• Which of the following best describes encrypted data?
• What type of motivation aligns with a threat actor who extracts sensitive data and threatens exposure if demands are not met?
• Why is security awareness training important for organizations?
• What is the final stage of the cyber kill chain?
• Why is compliance significant in cybersecurity?
• A threat actor exploits vulnerabilities in a device's wireless protocol to send a malicious file. This describes which networking vector?
• What does root cause analysis aim to identify?
• What type of risks should organizations prioritize when allowing BYOD policies?
• What is a data breach?
• What type of vulnerability describes the ongoing use of outdated technology or software despite known shortcomings?
• Which type of vulnerabilities are linked with security issues found in foundational software?
• What is a risk assessment used for?
• You are assessing a data center's physical security measures. Which measure is the most effective to prevent unauthorized access?
• What is the significance of threat modeling?
• Which of the following best describes ESPIONAGE in the context of cyber security?
• What is the main purpose of implementing access controls in a network?
• What is the primary function of a security audit?
• What does multi-factor authentication (MFA) enhance?
• What is the purpose of a vulnerability scan?
• What specific threat is described when a threat actor gains physical access to an organization's premises and attempts to attack the wired network?
• What does 'whaling' refer to in phishing attacks?
• What are two prominent risks associated with employees sideloading apps on personal devices in a corporate environment?
• What purpose does data encryption primarily serve?
• What is a primary security risk associated with jailbroken or rooted smartphones accessing corporate data?
• What best describes the security challenge presented by rooted smartphones?
• What type of vulnerability is characterized by a previously unknown flaw discovered in software, exposing customer data?
• During which stage of the cyber kill chain does the attacker gain unauthorized access to the system?
• Describe the concept of a 'threat landscape'.
• What is a common effect of a successful DDoS attack?
• What is a significant responsibility of a CISO?
• What is one of the major goals of a CISO?
• How can multi-factor authentication (MFA) enhance security?
• What is the primary goal of incident response planning?
• What is a business impact analysis (BIA)?
• What type of threat does ransomware represent?
• What is one benefit of employing honeypots in cybersecurity?
• What is a significant concern when employee smartphones are jailbroken?
• What is the primary function of a honeypot in cybersecurity?
• A global hacker group steals credit card information from a financial institution. What is their likely motivation?
• How is identity management best defined?
• Which of the following best describes a characteristic of threat hunting?
• A recent cyberattack caused significant disruptions in a country's power grid, traced back to a hostile nation-state. What is the primary motivation of the perpetrators?
• How does social engineering primarily pose a risk to organizations?
• What is the role of a Chief Information Security Officer (CISO)?
• How is the concept of "attack vector" defined?
• What is the MOST likely explanation for the lack of logs during frequent user account lockouts?
• Which of the following is a key stage in a cyber attack as outlined by the cyber kill chain?
• What impact does effective patch management have on vulnerabilities?
• What is one of the main benefits of application security during the software development lifecycle?
• In which type of attack is the attacker impersonating a legitimate user?
• When an enterprise relies on external entities for its IT security, what should it prioritize?
• Which of the following is a common network vulnerability?
• What is the main purpose of a risk assessment?
• What threat motivation is illustrated when an actor threatens to release sensitive patient data unless a ransom is paid?
• How do access controls help manage vulnerabilities?
• What is the role of penetration testing in security assessments?
• What is phishing primarily used for?
• What does a risk management framework (RMF) do?
• An employee reports that their laptop is no longer receiving updates and patches. What is the most likely cause of this problem?
• Which approach is most effective in preventing security breaches?
• What is the difference between qualitative and quantitative risk assessments?
• Which social engineering attack targets individuals visiting unsecured websites to compromise organization systems?
• Which of the following is an example of an attack vector?
• What action most effectively minimizes the threat from cross-site scripting (XSS) attacks on a web portal?
• What does the command phase in the cyber kill chain typically involve?
• In terms of cybersecurity, what is the consequence of a successful exploitation?
• What is the primary goal of risk management in cybersecurity?
• A company's cybersecurity team evaluates threats that could exploit vulnerabilities in its computing infrastructure. What type of threat does this scenario BEST describe?
• What is a key component of an effective incident recovery plan?
• In terms of threat detection, how does AI enhance security measures?
• What does SIEM stand for in cybersecurity?
• What function does a firewall perform in a network?
• What is social media's role in corporate security threats?
• What is a Configuration Management Database (CMDB)?
• What do patch management practices involve?
• As a security analyst, you identify multiple successful logins from the same user account with identical timestamps. What type of attack is this likely?
• What is an objective of implementing rate limiting?
• What is the significance of documenting vulnerabilities and planning mitigations?
• How is 'exploitation' defined in the context of cybersecurity?
• Why is having an incident recovery plan important?
• In the scenario of software developers being relied upon for security, what is a critical component of maintaining security?
• What is a common method for mitigating vulnerabilities in software?
• How might a security team describe an atypical rise in system log generation during off-peak hours due to errors and configuration issues?
• How can physical security controls mitigate risks?
• What is an example of a watering hole attack?
• What is the primary security risk associated with downloading multimedia files from unverified sources?
• Which type of threat actor is most likely responsible for a series of unsuccessful attempts to gain unauthorized access using publicly available tools?
• How do vulnerabilities differ from exploits?