Vulnerability Scanning CS0-003 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which scenario best describes an internal vulnerability scan?

   • AA scanner hosted in the cloud scans the company's public-facing web servers
   • BA scanner on the internet scans the company's DMZ
   • CA scanner located on the corporate LAN scans servers and workstations within the same network
   • DA scanner on a partner's network scans the company's external IP range
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security analyst must scan a legacy SCADA system that controls a power distribution grid. The system is known to be fragile and has crashed in the past when subjected to aggressive network probes. The analyst needs to identify vulnerabilities without risking an outage. Which scanning approach is the most appropriate?

   • AConduct a non-credentialed external scan from the internet
   • BPerform a passive scan by monitoring network traffic to the SCADA system
   • CDeploy an agent on the SCADA controller to perform local scans
   • DRun an active credentialed scan during a scheduled maintenance window
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security analyst is responsible for vulnerability scanning of a water treatment facility. The facility uses a mix of modern IT systems and legacy OT systems that control the treatment process. The OT systems are highly sensitive to network traffic and have no supported method for agent installation. The analyst needs to identify vulnerabilities in the OT environment. Which approach is most appropriate?

   • APerform an external scan of the facility's public IP addresses
   • BRun an active credentialed scan during off-peak hours
   • CDeploy agents on the OT systems
   • DUse passive scanning on the OT network segment
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What does a credentialed scan provide that a non-credentialed scan does not?

   • AAccess to detailed system configuration and installed software information
   • BThe ability to scan without network connectivity
   • CThe ability to scan without being detected
   • DThe ability to scan external systems
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is a limitation of non-credentialed vulnerability scanning?

   • AIt provides a complete and accurate picture of all vulnerabilities
   • BIt requires the installation of agents on target systems
   • CIt can only scan systems within the internal network
   • DIt cannot detect vulnerabilities that require authentication to identify
   Reveal Solution Discussion Select an answer first