VAPT Strategy ECDE Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A penetration test has been completed, and the report is being written. The report must be useful for both technical teams and management. What is the most important element to include?

   • AOnly the list of vulnerabilities with CVSS scores.
   • BA clear executive summary with risk ratings and a detailed technical appendix with evidence and remediation steps.
   • CA detailed log of every command executed during the test.
   • DA summary of the tools used during the test.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is the purpose of retesting after a vulnerability has been remediated?

   • ATo assign a new risk rating to the vulnerability
   • BTo update the vulnerability scanner's signature database
   • CTo ensure that the vulnerability is still present for documentation purposes
   • DTo confirm that the fix does not introduce new vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A DevSecOps engineer is managing the remediation of a penetration test report. The report lists a critical remote code execution (RCE) vulnerability in a legacy component that cannot be patched immediately, and a high-severity misconfiguration that can be fixed with a one-line change. The next release is scheduled in two weeks. The compliance team requires that all critical and high findings be remediated or formally accepted before the release. What should the engineer do?

   • AFix the RCE first by applying an untested patch directly to production, and defer the misconfiguration.
   • BFix the misconfiguration immediately, implement a compensating control for the RCE (such as a WAF rule), and request formal risk acceptance for the RCE from the business owner.
   • CMark both findings as accepted in the risk register without any remediation or compensating controls.
   • DDelay the release until the RCE is fully patched, even if it takes several months.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A security analyst needs to test a web application for SQL injection and cross-site scripting (XSS) vulnerabilities. The analyst wants to automate the initial discovery but also needs to manually verify any findings. Which tool combination should the analyst use?

   • AUse a SAST tool like SonarQube to scan the running application for SQLi and XSS.
   • BUse Nmap to scan for SQL injection and XSS vulnerabilities.
   • CUse OWASP ZAP to automatically scan the application, then manually replay the identified requests in Burp Suite to confirm exploitability.
   • DUse Metasploit to automatically exploit all identified vulnerabilities without manual verification.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A security team has a limited budget and needs to assess a new web application. They want to identify as many potential vulnerabilities as possible in a short time, but they do not have the resources to manually verify each finding. Which type of assessment should they choose?

   • AA full PTES-based penetration test with active exploitation.
   • BA source code review using a SAST tool.
   • CA manual penetration test performed by a single security analyst.
   • DAn automated vulnerability scan using a web application scanner.
   Reveal Solution Discussion Select an answer first