Attack Surface Rules & Infrastructure Security Quiz

Submit

3. In secure infrastructure, what does 'hardening' refer to?

Removing unnecessary services and configuring security controls

Increasing server processing power

Adding more physical security guards

Upgrading network cables

4. Which type of attack exploits trust relationships between systems?

Lateral movement attack

DDoS attack

Phishing attack

Brute force attack

Submit

6. What is the main benefit of implementing security baselines in infrastructure?

Ensures consistent security configurations across all systems

Eliminates the need for firewalls

Reduces the number of administrators

Increases network latency

7. Which technique involves monitoring network traffic for suspicious activity?

Intrusion Detection System (IDS)

Packet amplification

Port forwarding

Network bridging

Submit

9. In infrastructure security, what does microsegmentation accomplish?

Creates granular network zones to isolate individual workloads

Increases network bandwidth capacity

Removes all network monitoring

Consolidates multiple networks into one

10. Which of the following is NOT typically part of the attack surface?

Open network ports

Unpatched software

Employee training documentation

Exposed APIs

11. What is the primary goal of attack surface analysis in secure infrastructure?

Identify all potential entry points and vulnerabilities an attacker could exploit

Measure the physical perimeter of data centers

Calculate the cost of security hardware

Document employee access badges

12. What does the principle of defense in depth recommend?

Using multiple layers of security controls

Relying on a single firewall

Removing redundant security measures

Centralizing all security in one location

13. Which control type is implemented to prevent unauthorized access to sensitive data?

Preventive control

Detective control

Corrective control

Compensating control

Submit

15. In vulnerability management, what does CVSS score measure?

The severity and exploitability of a vulnerability

The cost of fixing a vulnerability

The number of patches available

The age of the vulnerability

16. What is the purpose of a demilitarized zone (DMZ) in network architecture?

To isolate public-facing services from internal networks

To increase internet bandwidth

To eliminate all network segmentation

To connect all servers directly to the internet

17. Which principle reduces attack surface by removing unnecessary services?

Principle of least privilege

Defense in depth

Principle of least functionality

Defense in width

Submit

19. In threat modeling, what does STRIDE stand for?

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Security, Testing, Routing, Implementation, Data, Encryption

Scanning, Tracking, Reconnaissance, Infiltration, Detection, Exploitation

System, Traffic, Remediation, Infrastructure, Documentation, Engagement

20. Which of the following best describes network segmentation?

Dividing a network into isolated subnets to limit lateral movement

Increasing bandwidth across all network zones

Removing all firewalls from the infrastructure

Consolidating all servers into a single subnet

Infrastructure Expert Reviewing Attack Surface Rules Quiz

1. A ____ assessment systematically tests infrastructure for security weaknesses.

2.

What first name or nickname would you like us to use?

2. A ____ is a tool that actively blocks malicious traffic before it reaches protected systems.

3. In secure infrastructure, what does 'hardening' refer to?

4. Which type of attack exploits trust relationships between systems?

5. A ____ defines the rules and procedures for user access to resources.

6. What is the main benefit of implementing security baselines in infrastructure?

7. Which technique involves monitoring network traffic for suspicious activity?

8. An ____ is a documented set of rules defining acceptable and prohibited network traffic.

9. In infrastructure security, what does microsegmentation accomplish?

10. Which of the following is NOT typically part of the attack surface?

11. What is the primary goal of attack surface analysis in secure infrastructure?

12. What does the principle of defense in depth recommend?

13. Which control type is implemented to prevent unauthorized access to sensitive data?

14. A ____ is a detailed diagram showing how data flows through a system.

15. In vulnerability management, what does CVSS score measure?

16. What is the purpose of a demilitarized zone (DMZ) in network architecture?

17. Which principle reduces attack surface by removing unnecessary services?

18. A zero-trust architecture assumes that ____ should not be trusted by default.

19. In threat modeling, what does STRIDE stand for?

20. Which of the following best describes network segmentation?