Vulnerability Scanning and Assessment EHE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A vulnerability assessment team is planning a scan of a large enterprise network. They need to ensure the scan does not disrupt business operations and that the results are actionable. Which step should they perform FIRST?

   • ANotify all employees about the scan to avoid surprises.
   • BDefine the scope and obtain written authorization from management.
   • CRun the scan immediately to get results as quickly as possible.
   • DPurchase the most expensive vulnerability scanner available.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A vulnerability scan of a web application reports a SQL injection vulnerability in a login form. The security analyst manually tests the form and finds that the input is properly sanitized and the vulnerability does not exist. However, the scanner also reports a cross-site scripting (XSS) vulnerability in a search field, which the analyst confirms is real. What should the analyst do with the scan results?

   • AIgnore the XSS vulnerability because the scanner may be wrong
   • BTreat both findings as real and remediate them equally
   • CRe-run the scan with a different tool to confirm both findings
   • DMark the SQL injection as a false positive and prioritize remediation of the XSS vulnerability
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary purpose of the reporting step in a vulnerability assessment?

   • ATo exploit vulnerabilities and verify their impact
   • BTo document findings and provide actionable recommendations
   • CTo automatically patch all identified vulnerabilities
   • DTo identify live hosts and open ports on the network
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A vulnerability scan reports a critical vulnerability on a server. The security analyst manually verifies the finding and determines that the vulnerability is not actually present because the server's configuration mitigates it. What should the analyst do?

   • ATreat the finding as real and remediate it
   • BDocument the finding as a false positive in the report
   • CRe-run the scan to confirm the finding
   • DIgnore the finding and remove it from the report
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A security consultant is conducting a vulnerability assessment for a client. The consultant has completed the planning phase and is about to begin the discovery phase. Which activity is part of the discovery phase?

   • AWriting the final report for management
   • BIdentifying active hosts and open ports on the target network
   • CDetermining the scope and objectives of the assessment
   • DAnalyzing scan results to prioritize risks
   Reveal Solution Discussion Select an answer first