Explain Vulnerability Management 100-160 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A penetration tester is asked to gather information about a target organization without alerting the target's intrusion detection system. Which technique is most appropriate?

   • AUse a vulnerability scanner to enumerate open ports.
   • BPerform a TCP connect scan on the target's web server.
   • CSend crafted ICMP packets to map the network.
   • DSearch public job postings and social media for technology mentions.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard · select all that apply

   A vulnerability management program is being implemented in a large organization. The team wants to ensure that vulnerabilities are identified, assessed, remediated, and verified in a consistent manner. Which of the following are essential components of an effective vulnerability management lifecycle? (Select all that apply.)

   • AA verification step to confirm that remediation was successful
   • BA remediation plan that includes patching and compensating controls
   • CA risk assessment process to prioritize findings
   • DA policy that requires all vulnerabilities to be fixed within 24 hours
   • EA process to ignore low-severity vulnerabilities
   • FRegular automated vulnerability scans
   Check answers Discussion Select an answer first
4. 13foundation · easy

   Which technique is most commonly used to identify unpatched software versions on a network during a vulnerability assessment?

   • APacket sniffing
   • BSocial engineering
   • CBanner grabbing
   • DAutomated vulnerability scanning
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is tasked with gathering information about a target organization's internet-facing infrastructure without alerting the target. The analyst wants to identify subdomains and associated IP addresses. Which passive technique is most appropriate?

   • APerform a DNS brute-force attack against the target's domain
   • BUse a port scanner to enumerate services on the target's web server
   • CSend a series of HTTP requests to the target's main website
   • DQuery public DNS databases and certificate transparency logs
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A vulnerability management team has a monthly cycle: scan, assess, remediate, verify. However, a critical zero-day vulnerability is announced that affects a widely used service in their environment. The next scheduled scan is in three weeks. What is the best course of action?

   • ARun an out-of-band scan targeting the affected service immediately.
   • BDisable the service on all systems until the next scan.
   • CWait for the next scheduled scan to avoid disrupting the environment.
   • DAssume the service is not affected because the vendor has not released a patch.
   Reveal Solution Discussion Select an answer first