Network Scanning and Vulnerability Detection GOAA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In AI-enhanced vulnerability detection, what is a common use of natural language processing (NLP)?

   • AEncrypting scan traffic to avoid detection
   • BVisualizing scan results in a graphical dashboard
   • CParsing vulnerability descriptions and security advisories to extract relevant indicators
   • DGenerating network packets to bypass firewalls
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   After running a vulnerability scan, an analyst receives a list of findings. Which factor is most important for prioritizing which vulnerability to address first?

   • AThe severity score (e.g., CVSS) combined with the exploitability and asset value
   • BThe number of characters in the vulnerability description
   • CThe order in which vulnerabilities were discovered
   • DThe vendor that published the vulnerability
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following best describes an AI-enhanced approach to network scanning?

   • AUsing machine learning to analyze scan results and automatically adjust scanning parameters
   • BUsing a script to run the same scan across multiple hosts sequentially
   • CUsing a vulnerability scanner with an updated signature database
   • DUsing a packet capture tool to record all network traffic during a scan
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst has scan results from multiple tools: a port scanner, a vulnerability scanner, and an AI-based prioritization tool. The AI tool ranks a medium-severity vulnerability as high priority because it is exposed to the internet and has a known exploit. The analyst needs to decide which vulnerability to remediate first. What should the analyst do?

   • AAsk the AI tool to re-evaluate with different parameters.
   • BIgnore the AI tool and remediate the highest-severity vulnerability first.
   • CFollow the AI tool's recommendation and remediate the medium-severity vulnerability first.
   • DRemediate all vulnerabilities at the same time.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A penetration tester has completed a vulnerability scan of a web application and received the following output: a critical SQL injection vulnerability in the login form, a high-severity cross-site scripting (XSS) issue in a search field, a medium-severity information disclosure in an error page, and a low-severity missing HTTP security header. The tester has limited time and must decide which vulnerability to exploit first to gain a foothold. Which should be the priority?

   • AThe SQL injection vulnerability, because it can lead to database access and potentially full system compromise.
   • BThe missing HTTP security header, because it is easy to fix and demonstrates a quick win.
   • CThe XSS vulnerability, because it can be used to steal session cookies and impersonate users.
   • DThe information disclosure issue, because it may reveal internal paths and credentials.
   Reveal Solution Discussion Select an answer first