Network Security Assessment Techniques and Tools CCT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   During the discovery phase of an assessment, you need to identify which hosts are live on a target network without sending any packets directly to the target systems. Which technique should you use?

   • AARP scan of the local subnet
   • BActive ICMP echo sweep with Nmap
   • CTCP SYN scan against common ports
   • DPassive reconnaissance using packet captures and DNS queries
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Nmap option is used to perform a TCP SYN scan?

   • A-sT
   • B-sU
   • C-sP
   • D-sS
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security analyst is using Nmap to scan a subnet. The analyst wants to identify which hosts are running a web server on port 443 and then determine the web server software version. Which Nmap command should the analyst use?

   • Anmap -p 443 -sV 192.168.1.0/24
   • Bnmap -p 443 -sC 192.168.1.0/24
   • Cnmap -p 443 --script http-title 192.168.1.0/24
   • Dnmap -p 443 -O 192.168.1.0/24
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which type of security assessment focuses on verifying compliance with policies and standards rather than actively exploiting vulnerabilities?

   • AVulnerability assessment
   • BPenetration test
   • CRed team exercise
   • DSecurity audit
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   After completing a network security assessment, you need to present findings to the IT team and management. The report must clearly prioritize vulnerabilities based on risk and provide actionable remediation steps. Which report structure best meets this requirement?

   • ARaw scan output and technical logs only
   • BExecutive summary, methodology, findings with risk ratings, and prioritized remediation recommendations
   • CA list of all vulnerabilities without risk ratings
   • DA summary of the tools used and the assessment timeline
   Reveal Solution Discussion Select an answer first