Assessing Risk

Question 1

You need to apply many Azure policies together for checking security compliance. What should you configure?

• Policy initiative
• Azure Blueprint
• Storage account
• Workspace

Answer 1

Policy initiative

Question 2

Prior to conducting penetration tests, what should be agreed upon?

• Rules of engagement
• Pen test scope
• Gap analysis
• Version of pen test tools to be used

Answer 2

Rules of engagement
Pen test scope

Question 3

You need a malware scan to thoroughly connect to and scan individual hosts. What should you configure?

• Active scan
• Schedule scan
• Passive scan
• Credentialed scan

Answer 3

Credentialed scan

Question 4

Which international non-profit organization compiles a list of the Top 10 web app vulnerabilities every few years?

• OWASP
• CSA
• NIST
• ISO

Answer 4

OWASP

Question 5

Which type of security testing will only identify weaknesses?

• Passive vulnerability scanning
• Penetration testing
• IRP drills
• Active vulnerability scanning

Answer 5

Passive vulnerability scanning

Question 6

Which benefits are derived from performing a gap analysis?

• Identify fraud within the organization
• Identify shortcomings
• Determine web app vulnerabilities
• Determine roadmap to reach desired outcome

Answer 6

Identify shortcomings
Determine roadmap to reach desired outcome