Explain Vulnerability Management 100-160 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary advantage of passive reconnaissance over active reconnaissance?

   • AIt requires no tools or skills
   • BIt provides more detailed information about open ports
   • CIt is faster than active reconnaissance
   • DIt is less likely to be detected by the target
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A penetration tester is conducting an authorized assessment of a network. The tester wants to identify live hosts and open ports on a specific subnet. Which active reconnaissance technique is most appropriate?

   • AMonitor network traffic with a packet sniffer
   • BQuery the target's DNS records for hostnames
   • CReview the target's public financial reports
   • DPerform a ping sweep followed by a port scan on discovered hosts
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   During an authorized penetration test, the tester wants to identify open ports and the services running on them without causing disruption. Which technique is most appropriate?

   • APerform a TCP connect scan and then use service enumeration on open ports.
   • BUse passive OSINT to determine open ports.
   • CSend a large number of packets to flood the network.
   • DUse a UDP scan on all ports.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the vulnerability management lifecycle, what is the primary purpose of the verification stage?

   • ATo assign ownership of remediation tasks to specific teams
   • BTo confirm that remediation efforts have successfully addressed the identified vulnerabilities
   • CTo prioritize vulnerabilities based on the risk they pose to the organization
   • DTo identify new vulnerabilities that may have appeared since the last scan
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team is responsible for scanning 500 servers every week. The team currently runs manual scans that require an analyst to initiate each scan and review the results. The team wants to reduce the time spent on repetitive tasks and ensure that scans are performed consistently. Which approach best addresses this need?

   • ASchedule automated scans using a vulnerability management platform
   • BUse a spreadsheet to track which servers have been scanned
   • CPerform a single scan of the entire network at the end of the month
   • DIncrease the frequency of manual scans to twice a week
   Reveal Solution Discussion Select an answer first