Network Scanning and Vulnerability Detection GOAA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A network administrator needs to scan a server to determine which TCP ports are open. The administrator wants to avoid completing full TCP connections to reduce the load on the server. Which scan type should the administrator use?

   • ATCP SYN scan
   • BUDP scan
   • CPing sweep
   • DTCP connect scan
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A red team is using an AI-enhanced vulnerability scanner that automatically adjusts its scanning behavior based on the target's responses. The scanner is designed to reduce the number of probes sent to the target to avoid detection. However, the scanner is producing a high number of false negatives, missing vulnerabilities that are actually present. The team needs to improve the scanner's recall without significantly increasing the chance of detection. Which adjustment should the team make?

   • ATrain the AI model with more diverse examples of vulnerable services to improve its ability to recognize them with fewer probes.
   • BDecrease the scanner's confidence threshold so it reports more potential vulnerabilities, even if some are false positives.
   • CSwitch to a traditional signature-based scanner that sends a fixed set of probes to every host.
   • DIncrease the scanner's confidence threshold so it only reports vulnerabilities with high confidence.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A penetration tester is scanning a target and finds an open port 443. The tester wants to identify the exact service and version running behind the port. Which nmap command should the tester use?

   • Anmap -sS -p 443 <target>
   • Bnmap -p 443 <target>
   • Cnmap -sV -p 443 <target>
   • Dnmap -O -p 443 <target>
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network administrator is conducting a security assessment and needs to identify which hosts on a subnet are running a UDP-based service. The administrator wants to avoid disrupting the service and needs to complete the scan quickly. Which scanning technique is most appropriate?

   • AUDP scan that sends a UDP packet to each port and analyzes ICMP port-unreachable responses.
   • BPing sweep to identify live hosts, then assume all live hosts are running the UDP service.
   • CTCP SYN scan on common UDP ports.
   • DTCP connect scan on all ports.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security analyst has completed a vulnerability scan and received a report with the following findings: a critical remote code execution vulnerability in a web server, a high-severity SQL injection in a database application, a medium-severity cross-site scripting (XSS) in a web application, and a low-severity information disclosure in a network service. The analyst needs to prioritize remediation efforts. Which vulnerability should be addressed first?

   • AThe SQL injection vulnerability, because it can lead to data theft.
   • BThe XSS vulnerability, because it can be used to steal user sessions.
   • CThe information disclosure vulnerability, because it is easy to fix.
   • DThe remote code execution vulnerability, because it can allow an attacker to take full control of the server.
   Reveal Solution Discussion Select an answer first