Discovery Tools PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a Nessus scan report, what does the 'CVSS' score primarily indicate?

   • AThe number of systems affected by the vulnerability
   • BThe time required to remediate the vulnerability
   • CThe severity of a vulnerability based on a standardized scoring system
   • DThe likelihood that the vulnerability will be exploited in the wild
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   When analyzing an OpenVAS report, what is the primary purpose of the 'Solution' field for a given vulnerability?

   • AIt lists the affected systems in the network.
   • BIt provides the CVSS score for the vulnerability.
   • CIt explains how the vulnerability was exploited during the scan.
   • DIt provides recommended remediation steps to fix the vulnerability.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   When analyzing a Nessus report, which of the following is the most reliable way to determine if a reported vulnerability is a false positive?

   • ACheck the CVSS score; high scores are always true positives.
   • BIgnore any vulnerability with a low CVSS score.
   • CRe-run the scan with the same settings; if it appears again, it is true.
   • DReview the plugin output and manually verify the affected service or configuration.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which Nikto command-line option is used to specify the target web server to scan?

   • A-o (output)
   • B-h (host)
   • C-p (port)
   • D-ssl
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a required configuration parameter when creating a new Nessus scan?

   • ATarget IP addresses or hostnames
   • BProxy server settings
   • CSMTP server for email notifications
   • DCredentials for authenticated scanning
   Reveal Solution Discussion Select an answer first