Vulnerability Scanning and Assessment EHE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A vulnerability assessment team has completed the discovery phase and identified several vulnerabilities. They now need to analyze the results and determine the risk associated with each finding. What is the next step in the vulnerability assessment process?

   • AImmediately begin remediation of all identified vulnerabilities.
   • BRe-run the scan to confirm the findings.
   • CReport the findings to management without analysis.
   • DAnalyze the vulnerabilities to determine their exploitability and impact.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A vulnerability assessment has been completed, and the report is ready. The report includes several critical vulnerabilities, but the IT manager is concerned about the cost of remediation. The manager asks the security analyst to recommend a remediation strategy that balances risk and cost. What should the analyst recommend?

   • ADefer all remediation until the next budget cycle
   • BPrioritize remediation based on risk and implement quick wins first
   • CRemediate all critical vulnerabilities immediately regardless of cost
   • DImplement only the cheapest remediation options
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator needs to quickly identify which hosts on a subnet are alive and what services they are running. The administrator wants a lightweight tool that can perform this task without requiring a full vulnerability scan. Which tool is most appropriate?

   • ABurp Suite
   • BNessus
   • COpenVAS
   • DNmap
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration testing team is contracted to assess a client's external web application. The client has provided credentials for the application's admin account and asked the team to identify as many vulnerabilities as possible. However, the client explicitly forbids any scanning that could disrupt the production environment. Which scanning approach should the team use?

   • AAuthenticated external scan with a limited scan profile and conservative timing
   • BUnauthenticated internal scan with default timing to avoid detection
   • CAuthenticated internal scan from within the client's network
   • DUnauthenticated external scan with aggressive timing to maximize coverage
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When prioritizing vulnerabilities from a scan report, which factor should be considered most important?

   • AThe number of characters in the vulnerability description
   • BThe name of the tool that detected the vulnerability
   • CThe order in which the vulnerabilities were discovered
   • DThe severity score and the potential impact on the organization
   Reveal Solution Discussion Select an answer first