Discovery and Vulnerability Scanning GMON Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has a mix of critical production systems and non-critical development systems. The security team wants to scan both, but the production systems cannot tolerate aggressive scanning during business hours. The compliance team requires quarterly scans of all systems. What is the most appropriate scanning schedule?

   • AScan all systems quarterly during business hours to meet compliance with minimal disruption.
   • BScan all systems weekly during off-hours to maximize security.
   • CScan production systems quarterly during a maintenance window, and scan development systems monthly during business hours.
   • DScan production systems weekly during business hours, and scan development systems quarterly.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A new network administrator is asked to run a discovery scan to identify active hosts on a segment that includes a third-party managed firewall. The admin has credentials for the network gear but no written authorization for scanning the segment. What should the admin do first?

   • AScan only the firewall's management interface to verify it is active, then proceed.
   • BUse the firewall's own logs to identify active hosts instead of running a scan.
   • CRun the discovery scan using a low-impact ping sweep to avoid disrupting the firewall.
   • DObtain written authorization from the network owner and the third-party manager before scanning.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is a key benefit of integrating vulnerability scan results into configuration management processes?

   • AIt ensures that all scan results are kept confidential from system owners
   • BIt eliminates the need for separate security monitoring tools
   • CIt automatically patches all vulnerabilities without human intervention
   • DIt allows remediation efforts to be tracked and linked to specific assets in the configuration management database
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security team is planning a discovery scan of a new cloud environment. The environment uses a virtual private cloud (VPC) with multiple subnets. The team has authorization to scan the entire VPC. Which approach is most appropriate for discovering active hosts in this environment?

   • AQuery the cloud provider's DNS for all instance hostnames.
   • BRun a vulnerability scan on the entire VPC CIDR range without prior discovery.
   • CRun a ping sweep across the entire VPC CIDR range.
   • DUse the cloud provider's API to list all instances, then run a port scan on the discovered instances.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Why is asset criticality an important factor in vulnerability remediation prioritization?

   • ABecause only critical assets can be exploited by attackers
   • BBecause critical assets are always more vulnerable than non-critical assets
   • CBecause a vulnerability on a critical asset poses a higher risk to the organization than the same vulnerability on a non-critical asset
   • DBecause critical assets are exempt from vulnerability scanning
   Reveal Solution Discussion Select an answer first