Examkin

Question

Difficulty: HardKey Security Concepts, Threats, Vulnerabilities, and Mitigations

Match each enterprise security threat scenario on the left with its most effective primary mitigation strategy on the right.

  • Password Spray Attack attempting low-frequency authentication across hundreds of corporate accountsEnforcing Multi-Factor Authentication (MFA) and smart lockout policies based on risk telemetry
  • Man-in-the-Middle (MitM) eavesdropping on unencrypted transit traffic across an untrusted network segmentImplementing end-to-end cryptographic transport protocols (TLS/IPsec) with strict certificate validation
  • Spear Phishing campaign directing executive targets to a spoofed login portalDeploying email authentication standards (SPF/DKIM/DMARC) paired with user awareness training
  • Zero-Day software vulnerability targeting an unpatched network management daemonApplying vendor micro-segmentation, intrusion prevention signatures, and rapid security patching

Answer

Password Spray Attack matches Multi-Factor Authentication (MFA) and smart lockout policies. Man-in-the-Middle eavesdropping matches end-to-end cryptographic transport protocols (TLS/IPsec). Spear Phishing matches email authentication standards (SPF/DKIM/DMARC) and user training. Zero-Day software vulnerability matches vendor micro-segmentation, IPS signatures, and rapid patching.
Each threat targets a specific layer or operational vulnerability, requiring an aligned mitigation control: Password Spraying is countered by Multi-Factor Authentication; Man-in-the-Middle transit interception is countered by TLS/IPsec encryption; Spear Phishing is countered by SPF/DKIM/DMARC and security awareness; and Zero-Day software flaws are countered by IPS signatures, network segmentation, and prompt patching.

Step-by-Step Solution

1
Analyze the Password Spray threat vector.
Identify that password spraying avoids single-account lockout by trying one password against many accounts.
MFA is the primary defense because even if a password matches, login fails without the second factor.
2
Analyze the Man-in-the-Middle (MitM) threat vector.
Identify that MitM exploits cleartext communication channels.
Cryptographic transport protocols like TLS and IPsec encrypt payload data and verify server identity via certificates.
3
Analyze the Spear Phishing threat vector.
Identify that spear phishing uses targeted fraudulent emails to fool specific personnel.
Combining domain verification controls (SPF/DKIM/DMARC) with human security training reduces email spoofing and link clicking.
4
Analyze the Zero-Day vulnerability threat vector.
Identify that zero-day exploits target unpatched software weaknesses.
Deploying IPS signatures, micro-segmentation, and timely vendor security patches directly mitigates software vulnerability risks.

Key Concept

Threat, Vulnerability, and Mitigation Mapping
Rate this question

Topics

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

More questions from this topic