CSI Threat & Vulnerability Assessment 3

Question 1

Which of the following is an example of a 'dynamic threat' as opposed to a 'static threat'?

Accepted Answer

An organized crime group that adapts its tactics over time

Answer

An organized crime group that changes its tactics represents a dynamic threat because the threat actor adapts, making static defenses less effective over time.

Question 2

During a vulnerability assessment, an investigator should assess 'single points of failure' because they:

Accepted Answer

Represent locations where one failure can disable an entire security system

Answer

Single points of failure are critical weaknesses where one failure or compromise can bring down an entire security function or system.

Question 3

Which threat assessment model categorizes threats by intent, capability, and opportunity?

Accepted Answer

The threat triad

Answer

The threat triad evaluates threats by examining whether an actor has the intent, capability, and opportunity to carry out an attack.

Question 4

A security investigator is tasked with assessing vulnerabilities at a corporate headquarters. Reviewing badge access logs for anomalies would PRIMARILY address which type of vulnerability?

Accepted Answer

Physical access control gaps

Answer

Analyzing badge access logs helps identify unauthorized or anomalous physical access patterns, directly addressing physical access control vulnerabilities.

Question 5

What is the purpose of conducting a 'red team' exercise during a security vulnerability assessment?

Accepted Answer

To simulate adversarial attacks and test actual defenses

Answer

A red team exercise simulates real-world adversarial attacks to test how effectively existing security measures can detect and resist threats.

(CSI) Certified Security Investigator Practice Test

(CSI) Certified Security Investigator Practice Test

CSI Threat & Vulnerability Assessment 3