Vulnerability Databases (National Vulnerability Database, US-CERT, Shodan) ISE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How do US-CERT bulletins typically differ from alerts and advisories?

   • ABulletins summarize multiple vulnerabilities and patches, often on a regular schedule
   • BBulletins are only issued during national emergencies
   • CBulletins contain only exploit code
   • DBulletins are exclusively for IoT devices
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which Shodan search query would help identify devices exposing an unauthenticated Redis service?

   • Avuln:Redis
   • Bcountry:Redis
   • Cport:Redis
   • Dproduct:Redis
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of the National Vulnerability Database (NVD)?

   • ATo provide a centralized repository of publicly disclosed cybersecurity vulnerabilities and related data
   • BTo store proprietary vulnerability information disclosed by private companies under non-disclosure agreements
   • CTo serve as a real-time monitoring service that alerts organizations the moment a new exploit is released
   • DTo provide a search engine for internet-connected devices and their exposed services
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A vulnerability management team is responding to a newly published CISA advisory about a critical vulnerability in a widely used IoT protocol library. The advisory includes a CVE ID but no CVSS score. The team needs to prioritize remediation across thousands of devices. The team has access to the NVD and Shodan. Which approach best balances speed and accuracy?

   • AImmediately query the NVD for the CVE ID to obtain the CVSS score, then use Shodan to identify all internet-exposed devices running the affected library version.
   • BWait for the NVD to publish the CVSS score before taking any action, since the score is required for prioritization.
   • CUse Shodan to find all devices using the affected library and remediate them all immediately, regardless of CVSS score.
   • DRely solely on the CISA advisory for prioritization, since it is the most timely source of threat intelligence.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An analyst needs to find all CVEs that affect a specific product and have a CVSS score above 8.0. The analyst wants to automate this process to run weekly. Which approach is most efficient?

   • ASubscribe to US-CERT alerts and filter by product
   • BUse the NVD API to query by CPE and filter by CVSS score in the script
   • CManually search the NVD website each week and note the scores
   • DUse Shodan to search for the product and look at the CVSS scores in the results
   Reveal Solution Discussion Select an answer first