4.4 Identify Vulnerabilities and Installed Packages CCCS Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A security analyst is comparing vulnerability findings between two identical Linux VMs in the same environment. One VM shows a critical vulnerability in a package, while the other does not. Both VMs have the same base image and are running the same version of the package. What is the most likely explanation for this difference?

   • AOne VM has not completed its vulnerability scan, so the finding is not yet reported.
   • BThe Falcon sensor on one VM is not licensed for vulnerability management.
   • CThe vulnerability is only present on VMs with a specific network configuration.
   • DOne VM has a different kernel version that affects the vulnerability assessment.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A DevOps engineer notices that a specific Ubuntu VM in Azure has a high number of vulnerabilities reported in Falcon, but the package inventory appears incomplete. The engineer suspects that some installed packages are not being detected. Which action is most likely to improve the completeness of the package inventory for this host?

   • AInstall the Azure Monitor agent to supplement Falcon's package data.
   • BDisable the host firewall to allow Falcon to access package repositories.
   • CVerify that the Falcon sensor is running with the latest version and has completed a full vulnerability scan.
   • DReboot the VM to force a fresh package inventory collection.
   Reveal Solution Discussion Select an answer first