CSI Threat & Vulnerability Assessment 2

Question 1

During a threat assessment, a security investigator identifies a disgruntled former employee who has retained access credentials. This situation is best classified as which type of threat?

Accepted Answer

Insider threat

Answer

A disgruntled former employee with retained access represents an insider threat, as the risk originates from someone with privileged knowledge of or access to the organization.

Question 2

Which methodology involves systematically walking through an organization's processes to identify points where threats could exploit weaknesses?

Accepted Answer

Threat modeling

Answer

Threat modeling is a structured approach that systematically identifies how threats could exploit system or process vulnerabilities.

Question 3

A CSI investigator is assessing a warehouse facility and notices the loading dock has no camera coverage and poor lighting after hours. What is the PRIMARY concern this represents?

Accepted Answer

Physical vulnerability

Answer

Lack of camera coverage and poor lighting at a loading dock represents a physical vulnerability that could be exploited for theft, unauthorized entry, or other crimes.

Question 4

Which of the following best describes the concept of 'threat probability' in a vulnerability assessment?

Accepted Answer

The likelihood that a specific threat will materialize

Answer

Threat probability refers to the likelihood or chance that a specific threat event will actually occur within a given time frame.

Question 5

An investigator conducting a vulnerability assessment discovers that security guards are skipping perimeter checks during the night shift. This is an example of what type of vulnerability?

Accepted Answer

Procedural vulnerability

Answer

Skipping required security procedures represents a procedural vulnerability, where established protocols are not being followed.

(CSI) Certified Security Investigator Practice Test

(CSI) Certified Security Investigator Practice Test

CSI Threat & Vulnerability Assessment 2