Vulnerability Scanning and Assessment EHE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A small company wants to perform a vulnerability scan of its internal network. The IT team has no prior experience with scanning tools and needs a solution that is easy to use, provides a graphical interface, and generates reports suitable for management. Which tool is most appropriate for this task?

   • AWireshark
   • BNmap with command-line options
   • CNessus Essentials
   • DMetasploit Framework
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which tool is specifically designed to automate the detection of vulnerabilities in network services and applications?

   • ANessus
   • BNmap
   • CMetasploit
   • DWireshark
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the key difference between an authenticated and an unauthenticated vulnerability scan?

   • AAuthenticated scans only test web applications, while unauthenticated scans test network devices
   • BAuthenticated scans require valid credentials, while unauthenticated scans do not
   • CAuthenticated scans are performed from outside the network, while unauthenticated scans are performed from inside
   • DAuthenticated scans are slower but do not generate any network traffic
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A vulnerability assessment is being conducted for a healthcare organization that must comply with HIPAA. The assessment team has limited time and must prioritize findings. The scan reveals a critical vulnerability in a legacy system that is not internet-facing but stores sensitive patient data, and a high vulnerability in an internet-facing web server that does not store patient data. Which finding should be prioritized for remediation?

   • AThe legacy system because it stores sensitive patient data and is critical.
   • BBoth equally because both are vulnerabilities.
   • CThe internet-facing web server because it is exposed to the internet.
   • DNeither because the scan is not a full penetration test.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security analyst is assessing a company's external attack surface. The analyst wants to simulate an attacker's perspective without any internal knowledge. Which type of scan should the analyst perform?

   • AAuthenticated internal scan
   • BUnauthenticated external scan
   • CUnauthenticated internal scan
   • DAuthenticated external scan
   Reveal Solution Discussion Select an answer first