Vulnerability Scanning and Assessment EHE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In vulnerability scan results, what is a false positive?

   • AA vulnerability that exists but is not detected by the scanner
   • BA vulnerability that has already been patched
   • CA vulnerability that is confirmed by manual testing
   • DA reported vulnerability that does not actually exist
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security team is planning to scan a new internal application that requires users to log in. The team wants to identify vulnerabilities that are only visible after authentication. Which type of scan should they perform?

   • AAuthenticated scan using valid credentials
   • BUnauthenticated scan from the external network
   • CInternal scan without credentials
   • DExternal scan with default credentials
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A vulnerability assessment team is preparing to scan a network that includes a mix of Windows and Linux servers. They need to ensure the scan is thorough and does not miss vulnerabilities that require authentication. What should they do?

   • AUse an unauthenticated scan to avoid the complexity of credentials.
   • BScan only the Linux servers because they are more secure.
   • CUse authenticated scans with appropriate credentials for each system.
   • DScan only the Windows servers because they are more common.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A vulnerability scan of a web application reports a high-risk finding for a cross-site scripting (XSS) vulnerability. The analyst reviews the scan output and sees that the scanner only tested the login page. The application has many other pages that accept user input. What is the most likely issue with the scan?

   • AThe scan is a false negative because it missed other XSS vulnerabilities.
   • BThe scan is incomplete because it did not test all input vectors, leading to a false sense of security.
   • CThe scan is a false positive because XSS cannot occur on login pages.
   • DThe scan is accurate because XSS only affects login pages.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   After a vulnerability scan, the analyst sees a critical finding for a missing security patch on a web server. The analyst manually verifies the patch is installed and the server is not vulnerable. What is the most appropriate next step?

   • AMark the finding as a false positive and exclude it from the final report.
   • BIgnore the finding because the scanner is clearly unreliable.
   • CReport the finding as critical because the scanner flagged it, and recommend immediate patching.
   • DRe-run the scan multiple times until the finding disappears.
   Reveal Solution Discussion Select an answer first