Vulnerability Assessments and Penetration Testing CCISO Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   A penetration testing firm has completed a test for a retail client and is writing the final report. The report must help the client's IT team understand which findings are most urgent and what to fix first. The client has a mature patching program but no dedicated security team. Which report structure best serves this audience?

   • AA technical report with only exploit proof-of-concept code and screenshots, leaving remediation recommendations to the client's own team.
   • BA raw scan output dump with all findings listed alphabetically by hostname, so the IT team can work through them systematically.
   • CAn executive summary with a prioritized findings table sorted by CVSS score, followed by detailed technical sections with step-by-step remediation guidance.
   • DA single-page memo that lists only the top three critical findings, omitting all lower-severity issues to avoid overwhelming the client.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A small business has a single web server hosting its public website. The owner wants to identify known vulnerabilities in the server's operating system and web server software without installing any new software on the server itself. Which approach should the security consultant recommend?

   • ARun an external vulnerability scan from a separate machine using a tool like OpenVAS or Nessus against the server's public IP address.
   • BReview the server's application logs manually to identify signs of known vulnerability exploitation.
   • CUse a web application firewall (WAF) to block known attack patterns and assume the server is secure.
   • DInstall a host-based intrusion detection system (HIDS) on the server to monitor for known vulnerability signatures.
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   Which step in the vulnerability assessment process involves defining the systems, networks, and applications that will be examined?

   • AScoping
   • BReporting
   • CScanning
   • DAnalysis
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A security team is planning a vulnerability assessment. The team has defined the scope, which includes all servers in the DMZ. What is the next step in the vulnerability assessment process?

   • AReport the findings to management.
   • BConduct the scan using appropriate tools.
   • CRemediate the identified vulnerabilities.
   • DAnalyze the scan results.
   Reveal Solution Discussion Select an answer first
6. 55application · medium

   A software company is launching a new customer-facing web portal. The development team has completed internal code reviews and unit testing. The CISO wants an independent assessment that simulates what an external attacker could do without any insider knowledge, but also wants to ensure the test covers the most common web application attack vectors. Which testing approach should the CISO select?

   • AA white-box penetration test conducted by the internal development team using their own source code and architecture diagrams.
   • BA gray-box vulnerability scan using an automated scanner with no manual validation of findings.
   • CAn internal black-box test performed by the IT operations team using only network scanning tools.
   • DA black-box penetration test conducted by an external firm using OWASP Testing Guide methodologies.
   Reveal Solution Discussion Select an answer first