A security analyst is asked to scan a partner network that is connected to the company's network via a VPN. The analyst has authorization to scan the company's network but not the partner's network. What should the analyst do?

Ask the partner to run the scan on their own network and share the results.

Scan the partner network but only for discovery, not vulnerability scanning.

Scan only the company's network segments and exclude the partner network from the scan scope.

Scan the partner network because it is connected via VPN and is part of the extended network.

A security analyst is setting up a discovery scan for a new office subnet. The analyst has been given the IP range 192.168.10.0/24 and has authorization to scan it. The analyst wants to identify all active hosts and the services they are running. Which approach is most appropriate?

Query the DHCP server for a list of assigned IP addresses.

Use a vulnerability scanner to scan the entire range for known vulnerabilities.

Run a ping sweep to identify active hosts, then a port scan on the discovered hosts to identify services.

Run a port scan on all 65,535 ports for every IP in the range without a ping sweep.

How does a vulnerability scanner typically identify known vulnerabilities on a system?

By attempting to log in to the system with default credentials

By comparing the system's software versions and configurations against a database of known vulnerability signatures

By analyzing network traffic for signs of an active attack

By reading the system's event logs to find past security incidents

A vulnerability scan reports that a web application is vulnerable to SQL injection. The application team reviews the code and finds that all user inputs are parameterized. How should the security analyst classify this finding?

True positive, because the scanner detected it.

True positive, but with a lower severity because the code is mostly secure.

Informational finding, because the scanner may have detected a potential issue.

False positive, because parameterized queries prevent SQL injection.

Which combination of factors is most important when prioritizing vulnerability remediation?

The name of the vulnerability and the vendor that disclosed it

The number of vulnerabilities found and the age of the scanner

The cost of the scanner and the time of day the scan was run

Severity of the vulnerability, exploitability, and criticality of the affected asset

GIAC Continuous Monitoring Certification

Domain 4Objective 2

Discovery and Vulnerability Scanning GMON Practice Questions (Page 6)

Part of the Configuration and Vulnerability Management domain, which makes up ~21% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 5–8 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

Questions 26–30

26application · medium
A security analyst is asked to scan a partner network that is connected to the company's network via a VPN. The analyst has authorization to scan the company's network but not the partner's network. What should the analyst do?
Select an answer first
27application · medium
A security analyst is setting up a discovery scan for a new office subnet. The analyst has been given the IP range 192.168.10.0/24 and has authorization to scan it. The analyst wants to identify all active hosts and the services they are running. Which approach is most appropriate?
Select an answer first
28foundation · easy
How does a vulnerability scanner typically identify known vulnerabilities on a system?
Select an answer first
29application · medium
A vulnerability scan reports that a web application is vulnerable to SQL injection. The application team reviews the code and finds that all user inputs are parameterized. How should the security analyst classify this finding?
Select an answer first
30foundation · easy
Which combination of factors is most important when prioritizing vulnerability remediation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GMON

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GMON” is a trademark of its owner, used for identification only.