Given a scenario, analyze vulnerabilities and attacks, and recommend solutions to reduce the attack surface.
5 practice questions under this official exam objective (CA1-005) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
What Should an Org Do First with Threat Intelligence on a Targeted Web Server?
When an organization receives actionable threat intelligence about an adversary targeting its web server application—including malicious IP addresses,
Preventing Tampered Update Binaries with Digital Signatures
When update processes deliver binaries that carry a legitimate file name but a different hash, the update channel has been poisoned by tampered or rep
Which Tool Identifies Third-Party Library Vulnerabilities?
When vulnerabilities are traced back to previously disclosed flaws in third-party libraries, the strongest preventive solution is integrating a Softwa
Which TTP Does a SIEM Timeline of Native Utility Execution Indicate?
A SIEM timeline showing certutil, PowerShell, bitsadmin, and rundll32 execution is a classic Living off the Land Binaries (LOLBins) pattern, not later
Which Vulnerability Should Be Remediated First: Web Server RCE?
This question tests vulnerability remediation prioritization by exposure, exploitability, and business impact. The page establishes that the web serve