Vulnerability Scans PT0-003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of performing an authenticated vulnerability scan?

   • ATo identify vulnerabilities that are only exploitable after a user has logged in
   • BTo bypass the need for a firewall during the scan
   • CTo test the strength of the password policy for all user accounts
   • DTo ensure the scan does not cause any disruption to the target system
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security testing technique analyzes source code for vulnerabilities without executing the program?

   • AStatic Application Security Testing (SAST)
   • BInteractive Application Security Testing (IAST)
   • CDynamic Application Security Testing (DAST)
   • DRuntime Application Self-Protection (RASP)
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which testing technique identifies vulnerabilities in a running application by simulating attacks against it?

   • AThreat modeling
   • BDynamic Application Security Testing (DAST)
   • CStatic Application Security Testing (SAST)
   • DSoftware Composition Analysis (SCA)
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A development team is using a mix of SAST and DAST in their CI/CD pipeline. They notice that SAST is producing many false positives, and DAST is missing some vulnerabilities that are only visible in the source code. The team wants to reduce false positives while improving coverage. Which approach should they take?

   • AStop using SAST and rely only on DAST
   • BReplace SAST with manual code review
   • CTune SAST rules and use DAST to validate findings
   • DRun SAST only on production code
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A penetration tester is planning a vulnerability scan of a web application that requires a login to access most of its functionality. Which type of scan would provide the most complete coverage of the application's attack surface?

   • AAn unauthenticated scan from the external network
   • BAn authenticated scan using valid user credentials
   • CA network scan of the application's host operating system
   • DA passive scan that only monitors network traffic
   Reveal Solution Discussion Select an answer first