Vulnerability Analysis and CVSS CEH Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A vulnerability assessment report lists the following findings: (1) an outdated SSL/TLS configuration on a web server, (2) a missing security patch on a database server, (3) a SQL injection flaw in a custom application, and (4) a weak password policy on a domain controller. How should these findings be categorized?

   • A1 is a network vulnerability; 2 is a host vulnerability; 3 is an application vulnerability; 4 is a policy vulnerability
   • BAll are application vulnerabilities because they affect the overall application environment
   • C1 and 2 are host vulnerabilities; 3 is an application vulnerability; 4 is a configuration vulnerability
   • D1 and 3 are network vulnerabilities; 2 and 4 are host vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security team must prioritize vulnerabilities for a patch cycle. They have the following data: Vulnerability 1: CVSS 9.0, internal system, no known exploit. Vulnerability 2: CVSS 7.5, internet-facing, public exploit. Vulnerability 3: CVSS 5.0, internal system, but the system contains sensitive customer data. Which vulnerability should be patched first?

   • AVulnerability 3, because it affects sensitive data.
   • BVulnerability 1, because it has the highest CVSS score.
   • CAll three should be patched simultaneously.
   • DVulnerability 2, because it is internet-facing and has a public exploit.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A vulnerability scanner reports a CVSS v3.1 base score of 6.1 for a web application vulnerability. The security team needs to determine the severity rating and decide if it should be fixed before the next release. What is the severity rating and what does it imply?

   • ALow severity; the vulnerability can be ignored
   • BMedium severity; the vulnerability should be addressed but may not be urgent
   • CHigh severity; the vulnerability must be fixed immediately
   • DCritical severity; the vulnerability requires immediate emergency patching
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A security engineer is analyzing a CVSS vector string for a vulnerability in a desktop application. The vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. The engineer needs to explain why the attack vector is 'Local' rather than 'Network'. Which statement correctly justifies this classification?

   • AThe vulnerability can be exploited remotely over the internet
   • BThe vulnerability requires the attacker to be on the same subnet as the target
   • CThe vulnerability requires the attacker to have high privileges on the system
   • DThe vulnerability can only be exploited by an attacker who has physical or logical access to the local system
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which CVSS metric indicates the level of access an attacker must have before being able to exploit a vulnerability?

   • AAttack Vector (AV)
   • BScope (S)
   • CPrivileges Required (PR)
   • DAttack Complexity (AC)
   Reveal Solution Discussion Select an answer first