Result Analysis PT0-003 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A vulnerability scanner flags a server as vulnerable to a TLS misconfiguration. Upon manual inspection, the server's TLS configuration is found to be secure. What is this finding called?

   • ATrue positive
   • BFalse positive
   • CFalse negative
   • DTrue negative
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A vulnerability scanner is unable to authenticate to a target Linux server during a scan, resulting in incomplete results. Which configuration issue is most likely causing this problem?

   • AThe scanner is not configured to perform a port scan.
   • BThe target server has too many open ports.
   • CThe target server is running a firewall that blocks all ICMP traffic.
   • DThe scanner is using an incorrect SSH port or credentials.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   During a penetration test, a vulnerability scanner reports that a web server is vulnerable to a specific remote code execution (RCE) vulnerability. Which action is the most appropriate first step to validate this finding?

   • AAdd the finding to the final report without further verification.
   • BMark the finding as a false positive because scanner reports are often inaccurate.
   • CCross-reference the scanner output with the vendor's advisory and the exact software version.
   • DImmediately exploit the vulnerability to confirm impact.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A penetration tester completes an internal network scan and the scanner reports that a Windows server is vulnerable to MS17-010 (EternalBlue). The tester manually verifies the finding by checking the installed patch level and confirms that the March 2017 security rollup is missing. However, the server has been isolated from the rest of the network with a host-based firewall that blocks all inbound SMB traffic. What should the tester do with this finding?

   • ARemove the finding from the report because the risk is mitigated by the firewall.
   • BChange the severity to informational because the host is not reachable.
   • CMark it as a false positive because the firewall prevents exploitation.
   • DReport it as a confirmed vulnerability with a note that exploitation is not currently possible due to the firewall.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A tester discovers a web application that uses a content management system (CMS) with a known critical vulnerability. The scanner flags this as a critical finding. The tester manually checks the CMS version and confirms it is vulnerable. However, the client states that the CMS is heavily customized and the vulnerable code has been removed. What should the tester do?

   • AReport the finding as confirmed because the CMS version is vulnerable.
   • BMark the finding as a false positive because the client says the code is removed.
   • CRemove the finding because the client has confirmed the code is removed.
   • DManually test the specific vulnerable code path to determine if it is present.
   Reveal Solution Discussion Select an answer first