Domain 1 – Vulnerabilities

A company recently migrated its sensitive data to a cloud-based platform. The IT team is concerned about potential vulnerabilities. What should be their primary focus to mitigate cloud-based vulnerabilities?

• Implementing strong firewall rules for on-premises servers.

• Encrypting data stored in the cloud.

• Verifying open ports on legacy systems.

• Ignoring vulnerabilities as they are inherent in cloud systems.

An organization realizes that a critical system has unsecured root accounts. What is the potential risk associated with unsecured root accounts?

• Loss of data due to weak encryption.

• Unauthorized access to sensitive information.

• Cloud-based vulnerabilities.

• Lack of vendor support.

A company is considering outsourcing its software development to a third-party vendor. What aspect should be a significant concern when it comes to third-party risks?

• Open permissions on internal servers.

• Proper firewall configuration.

• Lack of vendor support.

• Strong encryption protocols.

An organization is using outdated firmware on its critical systems. What is the primary risk associated with outdated firmware?

• Weak encryption protocols.

• Lack of vendor support.

• Open permissions on servers.

• Cloud-based vulnerabilities.

A company is experiencing a data breach, and investigation reveals that a zero-day vulnerability was exploited. What does 'zero-day vulnerability' mean in this context?

• A vulnerability that has been present for zero days.

• A vulnerability that is not yet exploited.

• A vulnerability that has been exploited before a patch is available.

• A vulnerability specific to cloud-based systems.

An organization's web server suffered a breach due to improper patch management. What could have been a consequence of this failure?

• Weak encryption protocols.

• Unauthorized access to sensitive information.

• Lack of vendor support.

• Loss of data due to open permissions.

A company has numerous legacy systems still in use. What is a potential risk associated with legacy systems?

• Lack of vendor support.

• Cloud-based vulnerabilities.

• Proper firewall configuration.

• Strong encryption protocols.

An organization experiences a significant financial loss following a cyber attack. What could have contributed to this financial impact?

• Proper firewall configuration.

• Encryption of sensitive data.

• Loss of customer confidence.

• Unsecure protocols in use.

A data breach occurs, and customer information is stolen. What is a potential consequence of this data breach?

• Loss of vendor support.

• Financial impact due to ransom payments.

• Identity theft.

• Proper firewall configuration.

An organization realizes that it has open ports and services on its critical systems. What is the primary risk associated with open ports and services?

• Lack of vendor support.

• Weak encryption protocols.

• Unauthorized access to sensitive information.

• Loss of data due to improper patch management.