Vulnerability Scanning and Assessment EHE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which remediation strategy is most appropriate for a vulnerability that has no available patch?

   • ADelete the affected system from the network
   • BIgnore the vulnerability until a patch is released
   • CApply the latest patch immediately
   • DImplement compensating controls to reduce the risk
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   After a vulnerability scan, the report lists a critical SQL injection vulnerability in a web application. The development team is unsure how to fix it. Which remediation recommendation is most appropriate?

   • AUse parameterized queries or prepared statements in the application code.
   • BUpgrade the database server to the latest version.
   • CInstall a web application firewall (WAF) and consider the issue resolved.
   • DDisable the web application until the vulnerability is patched.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   After a vulnerability scan, the report shows a medium-risk finding for an outdated SSL/TLS configuration on a web server. The server is scheduled for decommissioning in two months. What is the most appropriate remediation strategy?

   • AIgnore the finding because the server is being decommissioned.
   • BImmediately update the SSL/TLS configuration to the latest version.
   • CDocument the finding and accept the risk until decommissioning, with compensating controls if needed.
   • DMove the server to a different network segment to reduce exposure.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After a vulnerability assessment, the security team has identified several vulnerabilities. The team needs to document the findings and recommend remediation strategies. What should the team include in the report?

   • AA list of all vulnerabilities without any prioritization
   • BA prioritized list of vulnerabilities with remediation recommendations
   • CThe raw scan output without any analysis
   • DOnly the vulnerabilities that were successfully exploited
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which step in the vulnerability assessment process involves defining the scope, objectives, and rules of engagement?

   • AReporting
   • BPlanning
   • CDiscovery
   • DAnalysis
   Reveal Solution Discussion Select an answer first