Explain Vulnerability Management 100-160 Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A small IT team must scan 500 servers weekly for missing patches. They have limited staff time and need consistent results. Which approach best meets this need?

   • ASchedule an automated vulnerability scanner to run weekly and generate reports.
   • BUse a port scanner to identify open ports and infer missing patches.
   • CAsk each server administrator to report their patch status.
   • DManually check each server's patch level once a month.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which sequence correctly represents the vulnerability management lifecycle stages?

   • ARemediation, identification, assessment, verification
   • BAssessment, identification, verification, remediation
   • CIdentification, assessment, remediation, verification
   • DVerification, assessment, identification, remediation
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which action is an example of a configuration change used as a vulnerability mitigation strategy?

   • ARunning a vulnerability scan
   • BDisabling unnecessary services on a server
   • CMonitoring network traffic
   • DBacking up critical data
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which method is an example of passive reconnaissance?

   • ASearching public records for domain registration information
   • BRunning a port scan against the target
   • CConnecting to a target's web server to view its headers
   • DSending crafted packets to elicit responses
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A security analyst is troubleshooting a port scan that shows no open ports on a server that is known to be running a web application. The server is reachable via ping. What is the most likely cause?

   • AA host-based firewall is blocking the scan packets.
   • BThe web application is not running.
   • CThe server is offline.
   • DThe port scan was performed from the wrong network segment.
   Reveal Solution Discussion Select an answer first