Vulnerability Scanning and Penetration Testing GSEC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security analyst at a mid-sized company runs a quarterly vulnerability scan against all internal hosts. The report shows a critical-severity remote code execution vulnerability on a legacy application server that is not exposed to the internet, and a high-severity missing security patch on an internet-facing web server. The analyst has limited time and must decide which to remediate first. What should the analyst do?

   • ARemediate both simultaneously because both are critical to the organization's security posture.
   • BRe-scan both hosts to confirm the findings before taking any action.
   • CPatch the internet-facing web server first because it is exposed to a larger threat surface.
   • DPatch the legacy application server first because it has a higher CVSS severity score.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which tool is commonly used for network vulnerability scanning and provides a web-based dashboard for managing scan results?

   • AWireshark
   • BNessus
   • CMetasploit
   • DNmap
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   After a penetration test, the tester has documented a critical remote code execution vulnerability in an internal application. The application owner argues that the risk is low because the application is only accessible from the internal network. What should the tester include in the report to address this?

   • AA note that the application will be replaced soon, so no action is needed.
   • BA recommendation to ignore the finding due to low risk.
   • CA statement that the vulnerability is not exploitable because it is internal.
   • DAn exploit scenario showing how an attacker could pivot from a compromised internal host to the application.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security manager is deciding between a vulnerability scan and a penetration test for a new application. The goal is to determine if the application can be compromised by an external attacker. The budget is limited, and the application is not yet in production. What is the most appropriate choice?

   • AConduct a vulnerability scan because it is cheaper and faster.
   • BWait until the application is in production to test it.
   • CConduct a penetration test because it actively exploits vulnerabilities to demonstrate real-world impact.
   • DConduct both a scan and a penetration test, but only if the budget allows.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A penetration tester is hired to assess the security of a client's external web application. The client provides the tester with valid user credentials for a standard user account and asks the tester to attempt to escalate privileges. The tester has no prior knowledge of the internal network or source code. What type of penetration test is this?

   • ARed-team exercise
   • BGray-box penetration test
   • CWhite-box penetration test
   • DBlack-box penetration test
   Reveal Solution Discussion Select an answer first