Discovery and Vulnerability Scanning GMON Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A multinational company must comply with PCI DSS, which requires quarterly vulnerability scans, and also has an internal policy to scan all internet-facing systems weekly. The company operates in a region with strict data-residency laws that prohibit scanning data from leaving the country. The scanning team has a single vulnerability scanner located in the company's headquarters. What is the most appropriate approach?

   • AReduce the scan frequency to quarterly to match PCI DSS and avoid the weekly scan requirement.
   • BUse a cloud-based scanner that is hosted in a neighboring country, because it is closer and faster.
   • CDeploy a scanner in the region that can perform scans locally and store results within the country.
   • DRun the scans from headquarters and store the results in the headquarters database, because the data is encrypted.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What does 'scanning scope' define in a vulnerability scanning engagement?

   • AThe number of vulnerabilities that must be found
   • BThe type of scanner software to be used
   • CThe time of day when the scan will run
   • DThe specific IP addresses, networks, and systems that are permitted to be scanned
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of discovery scanning in a network environment?

   • ATo block unauthorized traffic from reaching internal servers
   • BTo automatically patch known vulnerabilities on discovered systems
   • CTo determine the operating system version of every device on the internet
   • DTo identify active hosts and the services they expose on the network
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team must schedule vulnerability scans for a multi-site environment. Site A is a data center with high-value servers that change frequently. Site B is a branch office with a small number of workstations that change rarely. The team has limited scanning resources and must avoid impacting business hours. What is the best scanning strategy?

   • AScan both sites monthly during off-hours to balance coverage and resource use.
   • BScan both sites weekly during business hours to ensure timely detection.
   • CScan Site A quarterly and Site B monthly, because branch offices are more exposed.
   • DScan Site A weekly during a maintenance window and Site B quarterly during off-hours.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following best describes the role of discovery scanning in a continuous monitoring program?

   • AIt replaces the need for configuration management by automatically fixing misconfigurations
   • BIt identifies active hosts and services, forming the basis for asset inventory and targeted vulnerability assessment
   • CIt provides a one-time snapshot of the network for compliance reporting
   • DIt validates that all software licenses are up to date on every host
   Reveal Solution Discussion Select an answer first