Vulnerability Scanning and Assessment EHE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security analyst is planning a vulnerability assessment for a hybrid network. The internal network contains sensitive servers that require authentication for accurate scanning. The external perimeter includes a web server that is publicly accessible. The analyst has limited time and must prioritize the most critical risk. Which combination of scans should the analyst perform first?

   • AUnauthenticated external scan only, skipping internal servers
   • BUnauthenticated internal scan of all servers and authenticated external scan of the web server
   • CAuthenticated internal scan only, skipping the external web server
   • DAuthenticated internal scan of sensitive servers and unauthenticated external scan of the web server
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team wants to automate vulnerability scanning as part of their CI/CD pipeline. They need a tool that can be integrated into the pipeline and provide API access for automated reporting. Which tool is most appropriate?

   • AQualys Cloud Platform
   • BOpenVAS
   • CNessus Professional
   • DNmap
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security team needs to scan a web application for vulnerabilities such as SQL injection and cross-site scripting. The team wants a tool that is specifically designed for web application testing and can also be used to manually verify findings. Which tool is most appropriate?

   • ANessus
   • BNmap
   • CWireshark
   • DBurp Suite
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A vulnerability scan of a network segment reports a critical vulnerability in a service that is only accessible from the internal network. The analyst knows that the service is protected by a firewall that blocks external access. The scan was performed from an external IP address. What is the most likely explanation for this finding?

   • AThe scanner used credentials to access the internal service.
   • BThe finding is a false negative because the scanner missed the real vulnerability.
   • CThe scanner is reporting a false positive because the service is not reachable externally.
   • DThe service is actually exposed externally despite the firewall rule.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary function of OpenVAS in the context of vulnerability scanning?

   • ATo exploit identified vulnerabilities and gain access to systems
   • BTo perform network traffic analysis and capture packets
   • CTo map network topology and discover open ports
   • DTo scan systems and networks for known vulnerabilities
   Reveal Solution Discussion Select an answer first