Explain Vulnerability Management 100-160 Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security team is implementing a vulnerability management program. They have limited staff and must prioritize vulnerabilities across a large environment. The team has identified a critical remote code execution vulnerability in a public-facing application and a high-severity vulnerability in an internal-only application. Both have patches available. Which approach best aligns with the vulnerability management lifecycle?

   • ADefer patching both applications until the next scheduled maintenance window
   • BPatch the public-facing application first, then patch the internal application
   • CPatch both applications simultaneously without prioritization
   • DPatch the internal application first because it is easier to access
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A small business has a single IT administrator who is responsible for vulnerability management. The administrator wants to ensure that all systems are scanned regularly without requiring manual initiation each time. Which approach is most effective?

   • APerform a manual scan only when a new vulnerability is announced
   • BAsk employees to report any unusual behavior on their computers
   • CConfigure a vulnerability scanner to run automatically on a weekly schedule
   • DUse a script that scans all systems once per year
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security team is conducting a passive reconnaissance exercise against their own organization's public-facing infrastructure. They want to identify exposed services and potential misconfigurations without sending any packets to the target systems. Which approach best meets this requirement?

   • ARun a TCP connect scan against all public IP addresses in the organization's ASN
   • BDeploy a network tap to capture traffic on the internal backbone
   • CUse a vulnerability scanner to perform an authenticated scan of the internal network
   • DQuery public certificate transparency logs and DNS records for the organization's domains
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A security team needs to scan a large number of systems for known vulnerabilities on a regular basis. They want to minimize manual effort and ensure that scans are performed consistently. Which approach is most effective?

   • AHave each system administrator run a manual scan on their own systems.
   • BUse a script that runs only when a user logs in.
   • CPerform a full scan only once a year.
   • DUse a centralized vulnerability management platform with automated scanning schedules.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A penetration tester is conducting an authorized assessment of a network. The tester wants to minimize the chance of being detected by intrusion detection systems (IDS) while still gathering information about open ports and services. Which approach is most effective?

   • APerform a ping sweep to identify live hosts and then stop
   • BUse a full connect scan on all ports as quickly as possible
   • CPerform a slow port scan with randomized timing and use fragmented packets
   • DUse only passive reconnaissance techniques
   Reveal Solution Discussion Select an answer first