VAPT Strategy ECDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which type of tool is primarily used to automatically identify known vulnerabilities in a system or application?

   • ADebugger
   • BPassword cracker
   • CVulnerability scanner
   • DPacket analyzer
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A DevSecOps engineer is asked to structure a penetration test for a web application that has a public-facing login portal and an internal admin API. The test must follow a recognized methodology and produce a report that maps findings to a remediation plan. Which framework should the engineer select?

   • ANIST SP 800-115, but only if the test is performed by an external third party.
   • BOSSTMM, with a focus on physical security controls at the data center.
   • CPTES, but only for the internal admin API, because the login portal is out of scope.
   • DOWASP Testing Guide, with the scope limited to the login portal and the admin API, and a report that includes risk ratings and remediation steps.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A team wants to automatically detect misconfigurations and known vulnerabilities in their Kubernetes cluster before each release. They need a tool that can be integrated into their CI/CD pipeline and that checks both the cluster configuration and the container images. Which tool should they choose?

   • AA single SAST tool that scans the Kubernetes YAML files and the Dockerfiles.
   • BBurp Suite for image scanning and kube-hunter for configuration checks.
   • Ckube-bench for cluster configuration checks and Trivy for container image scanning, both run as pipeline stages.
   • DOWASP ZAP for cluster configuration checks and Nessus for image scanning.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A DevSecOps engineer needs to select a vulnerability scanner for a mixed environment that includes on-premises servers, cloud VMs, and containerized workloads. The scanner must support authenticated scans and integrate with the CI/CD pipeline. Which type of scanner should the engineer choose?

   • AA dedicated container image scanner that also has a network scanning module.
   • BA network-based scanner that supports authenticated scans but has no API.
   • CA web application scanner that can also scan cloud APIs.
   • DA unified vulnerability management platform that supports network, cloud, and container scanning with API-based integration.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A development team wants to integrate security testing into their CI/CD pipeline. They currently run unit tests and build artifacts. They want to catch vulnerabilities early and prevent vulnerable builds from being deployed. Which integration is most effective?

   • ARun a DAST scan only in production after deployment.
   • BUse a vulnerability scanner on the final container image and deploy regardless of findings.
   • CAdd a SAST scan as a build step that fails the build on critical findings, and run a DAST scan against a staging environment before release.
   • DPerform a manual penetration test on every build.
   Reveal Solution Discussion Select an answer first