Vulnerability Databases (National Vulnerability Database, US-CERT, Shodan) ISE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network administrator wants to assess the organization's internet-facing attack surface. The administrator has a list of public IP addresses but is unsure which services are exposed. Which approach using Shodan would provide the most comprehensive view?

   • AUse the 'port' filter to search for common ports like 22, 80, and 443 across the entire internet.
   • BPerform a search using the 'net' filter for each IP range and review the banners for open ports and services.
   • CSearch for the organization's domain name using the 'hostname' filter to find all associated devices.
   • DUse the 'country' filter to search for devices in the organization's country and manually identify which ones belong to the organization.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A security analyst is monitoring for new threats and wants to receive timely notifications about vulnerabilities that may affect their organization's IoT devices. The analyst wants a source that provides both alerts for immediate threats and periodic summaries of less critical vulnerabilities. Which combination of resources is most appropriate?

   • ASubscribe to US-CERT (CISA) alerts for immediate threats and review their weekly bulletins for summaries
   • BOnly rely on vendor security advisories
   • CCheck the NVD RSS feed for new CVEs and ignore US-CERT
   • DUse Shodan search alerts to monitor for new exposed devices
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A vulnerability researcher has discovered a new vulnerability in a specific model of an IoT router. The researcher wants to ensure the vulnerability is properly cataloged in the NVD. What information must the researcher provide to the appropriate CVE Numbering Authority (CNA) to facilitate the process?

   • AThe Shodan search results showing exposed devices running the vulnerable firmware.
   • BA detailed description of the vulnerability, the affected product and version, and a proposed CPE identifier.
   • CThe CVSS score and vector string, since the NVD only catalogs vulnerabilities with a CVSS score.
   • DA proof-of-concept exploit code to demonstrate the vulnerability's impact.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the value of correlating US-CERT alerts with Shodan search results?

   • AIt provides legal authorization to scan devices
   • BIt replaces the need for a vulnerability scanner
   • CIt automatically patches vulnerable devices
   • DIt helps identify which of your internet-exposed devices may be affected by a newly announced threat
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security manager wants to stay informed about the latest cybersecurity threats and vulnerabilities that could affect their organization's IoT infrastructure. The manager prefers a single source that provides both technical details and mitigation strategies. Which resource is most suitable?

   • ANVD CVE entries
   • BUS-CERT (CISA) alerts and advisories
   • CShodan search results
   • DVendor-specific security bulletins
   Reveal Solution Discussion Select an answer first