A security analyst is monitoring a critical infrastructure network that contains systems that cannot tolerate any active probing. The analyst needs to identify new devices and services as they appear on the network. Which approach is most appropriate?

External vulnerability scanning

Credentialed agentless scanning

A development team is integrating a third-party Java library into their web application. Before deployment, the security team wants to identify known vulnerabilities in the library's source code without executing it. Which scanning technique should be used?

Static application security testing (SAST)

Dynamic application security testing (DAST)

A security analyst is performing an external vulnerability scan of a company's public web server. The analyst does not have credentials for the server. Which type of scan is being performed, and what is its primary limitation?

Credentialed scan; it can detect all vulnerabilities on the server

Agent-based scan; it requires software installation on the server

Non-credentialed scan; it cannot detect vulnerabilities that require authentication to see

Passive scan; it cannot detect any vulnerabilities

CompTIACySA+

Domain 2Objective 1

Vulnerability Scanning CS0-003 Practice Questions (Page 2)

Part of the Vulnerability management domain, which accounts for 30% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–33 in this domain), expect 4–7 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

12concepts

30%of the exam

Questions 6–10

6expert · hard
A security analyst is monitoring a critical infrastructure network that contains systems that cannot tolerate any active probing. The analyst needs to identify new devices and services as they appear on the network. Which approach is most appropriate?
Select an answer first
7application · medium
A development team is integrating a third-party Java library into their web application. Before deployment, the security team wants to identify known vulnerabilities in the library's source code without executing it. Which scanning technique should be used?
Select an answer first
8application · medium
A security analyst is performing an external vulnerability scan of a company's public web server. The analyst does not have credentials for the server. Which type of scan is being performed, and what is its primary limitation?
Select an answer first
9application · medium
A security analyst is tasked with creating a complete inventory of all devices connected to the corporate network. The analyst wants to identify devices that are not actively communicating but are still connected. Which technique is best suited for this task?
Select an answer first
10application · medium
A security analyst needs to inventory all devices on a highly sensitive production network. The network contains legacy medical devices that are known to crash when probed. The analyst wants to identify devices and their open ports without sending any packets to them. Which approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

Vulnerability Scanning CS0-003 Practice Questions (Page 2)

Questions 6–10

A security analyst is monitoring a critical infrastructure network that contains systems that cannot tolerate any active probing. The analyst needs to identify new devices and services as they appear on the network. Which approach is most appropriate?

A development team is integrating a third-party Java library into their web application. Before deployment, the security team wants to identify known vulnerabilities in the library's source code without executing it. Which scanning technique should be used?

A security analyst is performing an external vulnerability scan of a company's public web server. The analyst does not have credentials for the server. Which type of scan is being performed, and what is its primary limitation?

A security analyst is tasked with creating a complete inventory of all devices connected to the corporate network. The analyst wants to identify devices that are not actively communicating but are still connected. Which technique is best suited for this task?

A security analyst needs to inventory all devices on a highly sensitive production network. The network contains legacy medical devices that are known to crash when probed. The analyst wants to identify devices and their open ports without sending any packets to them. Which approach should be used?

Keep studying — Vulnerability management