A security analyst is planning a vulnerability scan of a production network that includes legacy SCADA devices. The scan must identify common vulnerabilities without causing service disruption. Which scan configuration is most appropriate?

Run a credentialed scan with default credentials on all devices.

Run an authenticated host scan with full port range and high intensity.

Run an application scan against the SCADA web interfaces.

Run an unauthenticated network scan with low intensity and limited port range.

A penetration test report includes a finding that a critical vulnerability was exploited, but the tester did not document the exact steps to reproduce the exploit. The client's development team is unable to verify the finding. What is the most likely consequence?

The finding may be dismissed as a false positive, and the vulnerability may remain unpatched.

The finding will be automatically accepted because it is critical.

The tester will be required to re-run the entire test.

The client will file a legal complaint against the tester.

A company is planning a penetration test of its new cloud-based application. The test must comply with the cloud provider's acceptable use policy, which prohibits certain types of scanning. The company wants to test the application's security without violating the provider's terms. What is the most appropriate approach?

Review the provider's policy and obtain written authorization for the test, including the specific techniques allowed.

Run the test from a third-party service that is not subject to the provider's policy.

Perform the test only against the application's API, avoiding network-level scans.

Conduct the test in a separate cloud environment that is not subject to the provider's policy.

In a black-box penetration test, what information does the tester typically receive?

Credentials for a standard user account

A list of known vulnerabilities in the target environment

Only the target's public IP address or domain name

Full network diagrams and source code

What is the primary goal of a penetration test?

To patch all discovered vulnerabilities during the test

To exploit vulnerabilities to demonstrate the potential impact and provide actionable remediation guidance

To test the response of the security operations center (SOC)

To identify as many vulnerabilities as possible in the shortest time

GIAC Security Essentials

Domain 5Objective 4

Vulnerability Scanning and Penetration Testing GSEC Practice Questions (Page 7)

Part of the Security Operations and Incident Response domain, which makes up ~16% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

8concepts

Questions 31–35

31application · medium
A security analyst is planning a vulnerability scan of a production network that includes legacy SCADA devices. The scan must identify common vulnerabilities without causing service disruption. Which scan configuration is most appropriate?
Select an answer first
32expert · hard
A penetration test report includes a finding that a critical vulnerability was exploited, but the tester did not document the exact steps to reproduce the exploit. The client's development team is unable to verify the finding. What is the most likely consequence?
Select an answer first
33expert · hard
A company is planning a penetration test of its new cloud-based application. The test must comply with the cloud provider's acceptable use policy, which prohibits certain types of scanning. The company wants to test the application's security without violating the provider's terms. What is the most appropriate approach?
Select an answer first
34foundation · easy
In a black-box penetration test, what information does the tester typically receive?
Select an answer first
35foundation · easy
What is the primary goal of a penetration test?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.