CND Threat Assessment & Vulnerability Management 5

Question 1

Which MITRE framework maps adversary tactics, techniques, and procedures (TTPs) and is widely used to inform threat assessments and detection strategies?

Accepted Answer

MITRE ATT&CK

Answer

MITRE ATT&CK is a knowledge base of adversary behaviors organized by tactics and techniques, used to model threats and improve detection and response capabilities.

Question 2

A security analyst uses open-source intelligence (OSINT) gathering as part of threat assessment. Which of the following is an OSINT technique?

Accepted Answer

Reviewing publicly available social media profiles to identify potential insider threats

Answer

OSINT involves collecting information from publicly available sources such as social media, websites, and public records to assess threats without direct system access.

Question 3

What is the purpose of vulnerability verification after a patch has been applied?

Accepted Answer

To confirm the vulnerability no longer exists and the fix was effective

Answer

Verification rescans the system after remediation to confirm the vulnerability has been successfully resolved and no residual exposure remains.

Question 4

In threat modeling, an 'asset' is best defined as:

Accepted Answer

Anything of value to the organization that needs protection

Answer

Assets are the components of value within an organization — including data, systems, personnel, and processes — that threat modeling seeks to protect.

Question 5

A CND professional is performing a risk assessment and categorizes a threat as having high likelihood but very low impact. How should this be treated compared to a low-likelihood, high-impact threat?

Accepted Answer

Risk ratings depend on combined likelihood and impact; they must be compared holistically using a risk matrix

Answer

A risk matrix plots likelihood against impact to produce a combined risk score; neither factor alone determines priority — both must be weighed together.

(CND) Certified Network Defender Practice Test

(CND) Certified Network Defender Practice Test

CND Threat Assessment & Vulnerability Management 5