To identify unknown gaps in detection, one should:

Question

Options

• AOnly trust verified threats
• BConduct regular security assessments
• CAssume all configurations are secure
• DRely solely on automated alerts

• A
  5% (2)
• B
  90% (36)
• C
  3% (1)
• D
  3% (1)

Explanation

Conducting regular security assessments (B) is the correct approach because they systematically probe your environment for blind spots - including threats you didn't know to look for - through methods like penetration testing, red team exercises, and gap analysis against frameworks like MITRE ATT&CK.

Why the distractors fail:

• A - Trusting only verified threats means you'll miss novel or emerging attack vectors by definition; unknown gaps require proactive discovery, not reactive filtering.
• C - Assuming configurations are secure is the opposite of healthy skepticism; misconfigurations are one of the most common sources of undetected exposure.
• D - Automated alerts can only flag what they're programmed to detect - they have no mechanism to surface their own blind spots or what they're missing.

Memory tip: Think of the word assess - "A Security Expert Seeks Surprises." Regular assessments are the only choice that actively seeks out what you don't know, rather than responding to what you already know.

No community discussion yet for this question.