CySA+ Attack Surface Management Quiz

1. Which approach best reduces attack surface by removing unnecessary services and components?

Network segmentation only

Hardening and minimization

Increasing system complexity

Adding more monitoring tools

2. What is the most effective strategy for managing vulnerabilities across distributed systems?

Manual individual assessments only

Centralized vulnerability management platform with automated scanning

Ignoring remote systems

Annual assessments only

3. Which vulnerability management practice involves testing security controls in a controlled lab environment?

Production system scanning

Red team exercises

Proof-of-concept validation

User training programs

4. What is the primary benefit of conducting regular vulnerability assessments?

Ensuring compliance with one audit only

Continuously identifying new and emerging risks

Eliminating the need for incident response

Reducing IT department staffing

5. Which factor is most critical when determining vulnerability severity in an enterprise environment?

The age of the vulnerability

Business impact and asset criticality

The vendor's patch release date

Number of affected users only

6. In vulnerability management, what does 'remediation' primarily involve?

Reporting vulnerabilities to executives

Taking corrective actions to fix identified vulnerabilities

Documenting security policies

Increasing system monitoring

7. Which scanning technique identifies vulnerabilities by comparing current system state against known vulnerability databases?

Manual code review

Signature-based scanning

User acceptance testing

Load testing

8. What is the primary purpose of security baseline configuration?

Documenting historical incidents

Establishing minimum security standards for systems

Creating user access policies only

Measuring employee productivity

9. Which vulnerability management activity involves applying security updates to systems?

Threat hunting

Patch management

Penetration testing

Log aggregation

10. What is a key advantage of implementing zero-trust principles in attack surface management?

Eliminating all security controls

Assuming no trust and verifying every access request

Removing network segmentation

Disabling authentication systems

11. Which scanning method provides the most comprehensive view of an organization's attack surface by identifying open ports and services?

Passive reconnaissance

Active vulnerability scanning

Log analysis only

Wireless sniffing

12. In CySA+ vulnerability management, what does CVSS scoring help determine?

Employee performance ratings

Severity and exploitability of vulnerabilities

Network bandwidth requirements

Backup schedule frequency

13. Which scanning type is most suitable for identifying configuration weaknesses without actively exploiting systems?

Destructive testing

Non-intrusive configuration assessment

Social engineering tests

Physical penetration testing

14. What is the primary goal of vulnerability prioritization?

Fixing vulnerabilities in alphabetical order

Focusing remediation efforts on highest-risk vulnerabilities first

Patching all systems simultaneously

Ignoring low-severity findings

15. Which of the following best describes asset inventory management in vulnerability control?

Tracking employee computer equipment costs

Identifying all hardware, software, and network components to assess exposure

Managing only cloud-based resources

Documenting physical server locations

16. What is the primary benefit of implementing a vulnerability management program?

Guaranteeing zero security breaches

Reducing risk by systematically identifying and remediating weaknesses

Eliminating the need for firewalls

Replacing incident response procedures

17. Which tool is commonly used for continuous vulnerability scanning and compliance assessment?

Wireshark

Nessus or OpenVAS

John the Ripper

Aircrack-ng

18. In the context of CySA+, what does 'attack surface' primarily refer to?

Physical security perimeter

All exploitable entry points and vulnerabilities in systems

Only network-based threats

Employee training completion rates

19. Which vulnerability assessment approach focuses on identifying weaknesses from an attacker's perspective?

Compliance scanning