Vulnerability Scanning and Penetration Testing GSEC Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company is subject to a regulatory requirement that mandates regular vulnerability assessments. The company has hired a penetration testing firm to conduct the assessments. The firm has proposed a testing methodology that includes active exploitation of vulnerabilities. The company's legal team is concerned about potential liability if the exploitation causes a service outage. How should the company address this concern?

   • AConduct the test without a contract to avoid legal complications
   • BProhibit all active exploitation and only allow vulnerability scanning
   • CRequire the firm to sign a liability waiver absolving the company of all responsibility
   • DInclude a detailed scope and rules of engagement in the contract, specifying which systems may be exploited and under what conditions
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   When prioritizing vulnerabilities from a scan report, which factor is most important to consider?

   • AThe number of times the vulnerability appears in the report
   • BThe date the vulnerability was first discovered
   • CThe severity score and the likelihood of exploitation
   • DThe alphabetical order of the vulnerability names
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A company is planning to conduct a vulnerability scan of its production environment. The scan will be performed by an external vendor. What should the company do before the scan begins?

   • AAsk the vendor to sign a non-disclosure agreement only
   • BNotify the vendor of the scan schedule but not the scope
   • CProvide the vendor with all administrative credentials
   • DDefine the scope, including IP ranges and systems to be scanned, and obtain written authorization
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A security analyst is comparing the output of two vulnerability scanners. Scanner A reports a critical vulnerability in a web server, but Scanner B does not report it. The analyst needs to determine which result is accurate. What is the most reliable way to verify the finding?

   • ATrust Scanner B because it did not report the vulnerability.
   • BRun a third scanner to break the tie.
   • CTrust Scanner A because it reported a critical severity.
   • DManually verify the vulnerability by checking the server's configuration and version against the advisory.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A vulnerability scan report lists a critical vulnerability in a web server that is not exposed to the internet and is only accessible from the internal network. The server is scheduled for decommissioning in two months. What is the most appropriate prioritization?

   • ATreat it as the highest priority because of the critical severity.
   • BIgnore it because the server is being decommissioned.
   • CTreat it as high priority but not the highest, because the attack surface is limited.
   • DDecommission the server immediately.
   Reveal Solution Discussion Select an answer first