Continuous Vulnerability Management GCCC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company discovers a zero-day vulnerability in a widely used third-party library. No patch is available yet. The library is used in an internal application that is not exposed to the internet. Which immediate action is most appropriate?

   • AWait for the vendor to release a patch and do nothing else.
   • BImplement an intrusion detection/prevention system rule to detect or block exploitation attempts.
   • CIncrease the scan frequency to daily.
   • DRemove the library from the application immediately.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization has a highly dynamic cloud environment where new containers are created and destroyed within minutes. The security team needs to identify vulnerabilities in these containers as they are deployed. Which approach is most effective?

   • AIntegrate vulnerability scanning into the CI/CD pipeline to scan container images before deployment.
   • BSchedule a weekly active scan of the container host IP addresses.
   • CScan the container registry once a month.
   • DUse passive network monitoring to detect vulnerabilities in running containers.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst needs to identify vulnerabilities in a network segment where active scanning is prohibited due to operational constraints, but the team still wants to detect known vulnerable software versions. Which technique is most appropriate?

   • APassive network monitoring to observe software banners and version strings in traffic.
   • BAgent-based scanning on all hosts in the segment.
   • CManual review of asset inventory spreadsheets.
   • DExternal scanning from the internet.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team needs to report to management on the effectiveness of the vulnerability management program. They have data on scan coverage, remediation rates, and mean time to remediate. Which combination of metrics provides the most balanced view?

   • AAverage CVSS score and number of false positives.
   • BTotal number of vulnerabilities and number of scans performed.
   • CNumber of patches applied and number of systems rebooted.
   • DScan coverage percentage, percentage of critical vulnerabilities remediated within SLA, and MTTR for known exploited vulnerabilities.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a mix of always-on servers and remote laptops that connect to the VPN only occasionally. The security team wants continuous vulnerability coverage for both groups. Which scanning approach is most effective?

   • AScan only the servers because laptops are less critical.
   • BRun an active network scan from the corporate data center every night.
   • CInstall an agent on each laptop and server that reports to the vulnerability management platform whenever the device is online.
   • DUse passive network monitoring to capture traffic from all devices.
   Reveal Solution Discussion Select an answer first