Network Scanning and Vulnerability Detection GOAA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A network administrator is troubleshooting a connectivity issue and wants to know which UDP ports are open on a server. The administrator runs a UDP scan with nmap -sU. The scan completes quickly, but the administrator is unsure if the results are reliable. What is the most likely reason for unreliable UDP scan results?

   • AUDP scans are unreliable because they cannot distinguish between open and filtered ports.
   • BUDP scans are unreliable because they only scan a limited range of ports by default.
   • CUDP scans are unreliable because they require root privileges and the administrator may not have them.
   • DUDP scans are slow and often unreliable because open ports may not respond, and ICMP port unreachable messages are used to identify closed ports.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   After discovering that port 80 is open on a target, a tester wants to determine the exact web server software and version. Which scanning technique should be used?

   • AUDP scan
   • BTCP SYN scan
   • CPing sweep
   • DService and version detection
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary role of a vulnerability scanner in an offensive operation?

   • ATo identify known weaknesses in systems and applications that could be exploited
   • BTo capture and analyze network traffic for sensitive information
   • CTo actively exploit vulnerabilities to gain access to target systems
   • DTo map the network topology and identify live hosts
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security analyst is reviewing scan results from an AI-based vulnerability prioritization tool. The tool ranks a vulnerability as 'critical' because it is exposed to the internet and has a known exploit. However, the analyst knows that the vulnerability is on a development server that is scheduled for decommissioning next week. What should the analyst do?

   • AAsk the AI tool to re-evaluate with the decommissioning date as a factor.
   • BDeprioritize the vulnerability because the server is being decommissioned.
   • CPrioritize the vulnerability because the AI tool ranked it as critical.
   • DImmediately patch the server to reduce risk.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does a typical vulnerability scanner identify a known vulnerability in a web server?

   • ABy comparing the server's version and configuration against a database of known vulnerabilities
   • BBy sending a malicious payload to the server to confirm exploitation
   • CBy performing a full TCP handshake to every port on the server
   • DBy analyzing the server's response to malformed HTTP requests
   Reveal Solution Discussion Select an answer first