Vulnerability Scans PT0-003 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A penetration tester is assessing a web application that has both public and authenticated areas. The tester has valid credentials for a standard user account. The goal is to identify as many vulnerabilities as possible while minimizing the risk of disrupting the application. Which approach should the tester take?

   • ARun only an unauthenticated scan to avoid any risk of disruption
   • BRun a DAST scan without authentication
   • CRun only an authenticated scan with the provided credentials
   • DRun both unauthenticated and authenticated scans, starting with unauthenticated
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A penetration tester is assessing a web application that requires authentication. The tester has valid credentials and wants to identify vulnerabilities that are only visible after login, such as IDOR and privilege escalation. Which testing method should the tester use?

   • AUnauthenticated vulnerability scan
   • BUnauthenticated DAST scan
   • CAuthenticated DAST scan
   • DStatic application security testing
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A security analyst wants to identify vulnerabilities that an external attacker could exploit without any credentials. Which type of vulnerability scan should be performed?

   • AAuthenticated scan
   • BUnauthenticated scan
   • CDynamic application security test
   • DStatic application security test
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security consultant is performing an external penetration test of a company's public-facing web server. The consultant has no credentials and wants to identify vulnerabilities that an anonymous attacker could exploit. Which scanning approach is most appropriate?

   • AStatic application security testing of the server's source code
   • BDynamic scan with default credentials
   • CAuthenticated scan using a test account
   • DUnauthenticated scan of the public-facing server
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the main characteristic of an unauthenticated vulnerability scan?

   • AIt does not use any user credentials to access the target
   • BIt only scans the target's source code for flaws
   • CIt requires a valid account with administrative privileges
   • DIt is performed only from inside the network
   Reveal Solution Discussion Select an answer first