Vulnerability Scanning and Penetration Testing GSEC Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A vulnerability scan report shows a high-severity vulnerability on a server that is scheduled for decommissioning in two weeks. The same report shows a medium-severity vulnerability on a server that hosts a critical business application. The security team has limited resources. What should the team do?

   • ARemediate both vulnerabilities simultaneously
   • BIgnore both vulnerabilities because the scan may be inaccurate
   • CRemediate the medium-severity vulnerability on the critical application server first
   • DRemediate the high-severity vulnerability on the decommissioned server first
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What type of output does a typical vulnerability scanner produce?

   • AA report of vulnerabilities with severity ratings and remediation recommendations
   • BA packet capture of all network traffic during the scan
   • CA proof-of-concept exploit for each discovered vulnerability
   • DA list of open ports and services detected on the target
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of defining the scope in a penetration testing engagement?

   • ATo ensure that all vulnerabilities are found in the shortest time possible
   • BTo provide the tester with all necessary credentials and access
   • CTo increase the difficulty of the test for the penetration tester
   • DTo limit the testing to authorized systems and avoid unintended targets
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What does the 'intensity' setting on a vulnerability scanner control?

   • AThe number of concurrent scans that can be run at once
   • BThe IP address range that the scanner will target
   • CThe level of testing performed, such as the number of checks and the aggressiveness of the scan
   • DThe size of the report generated at the end of the scan
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A vulnerability scan of a web application reports a medium-severity cross-site scripting (XSS) vulnerability in a search function. The application is used internally by employees, and the search function is not accessible to external users. The security team has a limited budget. What is the most appropriate action?

   • ADisable the search function until the XSS is fixed.
   • BPrioritize remediation of higher-severity issues first, but schedule the XSS fix in the next development cycle.
   • CIgnore the XSS because it is only internal.
   • DImmediately fix the XSS because it is a security vulnerability.
   Reveal Solution Discussion Select an answer first