A security team needs to identify all hosts on a network that are running a specific version of a vulnerable web server. The team has authorization to scan the network. Which scanning technique is most efficient for this task?

Perform a discovery scan to identify active hosts, then run a vulnerability scan that checks for the specific web server version.

Query the company's DNS server for all A records and check each one for the web server version.

Use a passive network monitoring tool to capture traffic and identify web servers without sending any packets.

Run a full port scan on all 65,535 ports for every host in the network.

A security analyst needs to discover all active hosts on a network segment that contains both Windows and Linux systems. The analyst has been authorized to scan the segment. Which technique is most effective for host discovery across both operating systems?

Use a NetBIOS scan to identify Windows hosts only.

Use a UDP scan of common ports on all IP addresses.

Use an ICMP echo request sweep only.

Use a TCP SYN scan of common ports on all IP addresses in the segment.

Which factor should most directly influence the frequency of vulnerability scanning in an organization?

The number of security analysts on staff

The physical location of the data center

The age of the vulnerability scanner software

The organization's risk tolerance and compliance requirements

What is the main purpose of vulnerability scanning?

To replace the need for patch management

To exploit vulnerabilities to prove they are real

To identify known vulnerabilities in systems and applications

To block all network traffic that might be malicious

A security team is evaluating a new vulnerability scanner. The scanner uses only version-based detection and does not perform any authentication. The team wants to reduce false positives. What should the team do?

Supplement the scanner with authenticated checks or manual verification for critical findings.

Use the scanner's results as-is because version-based detection is reliable.

Increase the scan frequency to catch more vulnerabilities.

Disable the scanner's version-based detection and rely on manual testing.

GIAC Continuous Monitoring Certification

Domain 4Objective 2

Discovery and Vulnerability Scanning GMON Practice Questions (Page 3)

Part of the Configuration and Vulnerability Management domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 5–8 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

Questions 11–15

11application · medium
A security team needs to identify all hosts on a network that are running a specific version of a vulnerable web server. The team has authorization to scan the network. Which scanning technique is most efficient for this task?
Select an answer first
12application · medium
A security analyst needs to discover all active hosts on a network segment that contains both Windows and Linux systems. The analyst has been authorized to scan the segment. Which technique is most effective for host discovery across both operating systems?
Select an answer first
13foundation · easy
Which factor should most directly influence the frequency of vulnerability scanning in an organization?
Select an answer first
14foundation · easy
What is the main purpose of vulnerability scanning?
Select an answer first
15application · medium
A security team is evaluating a new vulnerability scanner. The scanner uses only version-based detection and does not perform any authentication. The team wants to reduce false positives. What should the team do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.