Network Security Assessment Techniques and Tools CCT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   After completing a network security assessment, you need to communicate the findings to both technical staff and executives. The report must include a high-level overview and detailed technical recommendations. Which report structure best meets this requirement?

   • AA list of all vulnerabilities without remediation steps
   • BA summary of the tools used and the assessment timeline
   • CRaw scan output and logs only
   • DExecutive summary, detailed findings, and technical remediation steps
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key characteristic of active reconnaissance compared to passive reconnaissance?

   • AIt is only used after exploitation
   • BIt involves direct interaction with the target, which may be detected
   • CIt relies solely on publicly available information
   • DIt is always illegal without a warrant
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary function of a vulnerability scanner like Nessus or OpenVAS?

   • ATo crack passwords from captured hashes
   • BTo identify known vulnerabilities in systems and applications
   • CTo exploit vulnerabilities to gain access to systems
   • DTo monitor network traffic in real time
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes the role of a network security assessment in an organization?

   • AIt is a method to ensure that all employees follow security policies
   • BIt is a one-time activity performed only after a major security incident
   • CIt is a proactive measure to discover weaknesses before they are exploited by attackers
   • DIt is a process that focuses solely on physical security controls
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   You are performing reconnaissance on a target network. The client has asked you to avoid any activity that could be detected by the target's intrusion detection system (IDS). Which of the following activities should you choose to minimize detection risk?

   • AVulnerability scanning with Nessus
   • BPassive reconnaissance using public sources and network sniffing
   • CActive port scanning with Nmap using default timing
   • DExploitation with Metasploit
   Reveal Solution Discussion Select an answer first