Vulnerability Management GSLC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   During an incident response investigation, the team discovers that the attacker exploited a vulnerability that was known but not patched. The vulnerability had been identified in a scan six months ago. The incident response team wants to prevent similar incidents. What should the vulnerability management team do?

   • AUpdate the incident response plan to include vulnerability management steps.
   • BPrioritize the remediation of the exploited vulnerability and any similar vulnerabilities.
   • CReport the incident to the vendor of the vulnerable software.
   • DConduct a full re-scan of the entire network to identify all vulnerabilities.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   After a major patching effort, the vulnerability management team wants to confirm that all critical vulnerabilities have been resolved. The team has already applied patches and configuration changes. What is the best way to verify the remediation?

   • AAsk the system administrators to confirm that the patches were successful.
   • BRun a vulnerability scan on the affected systems and compare the results to the previous scan.
   • CReview the patching logs to confirm that patches were applied.
   • DWait for the next scheduled scan to see if the findings disappear.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security manager at a university must prioritize vulnerabilities across research systems that handle grant data and administrative systems that handle student records. Both are internet-facing. The research systems have a critical vulnerability with no known exploit, while the administrative systems have a high vulnerability that is actively being exploited in the wild. Which should be prioritized?

   • ANeither system because the university has limited resources
   • BThe administrative systems because the vulnerability is actively exploited
   • CThe research systems because the vulnerability is critical
   • DBoth systems equally because both are internet-facing
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   During an incident response investigation, the team discovers that the attacker exploited a known vulnerability that had been identified in a vulnerability scan three months earlier but had not been patched. Which improvement to the vulnerability management program would most directly reduce the likelihood of a similar incident?

   • AIncrease the frequency of vulnerability scans from quarterly to monthly
   • BRequire incident response to review all vulnerability scan reports
   • CAdd more vulnerability signatures to the scanning tool
   • DShorten the remediation SLA for critical vulnerabilities and track overdue items
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security analyst is reviewing a vulnerability scan report and notices a critical vulnerability in a software product that the company uses. The analyst wants to confirm the vulnerability details and check whether any vendor mitigation is available. Which source should the analyst consult first?

   • AA general internet search for the vulnerability name
   • BThe company's asset inventory database
   • CThe vulnerability scanner's user manual
   • DThe software vendor's security advisory page
   Reveal Solution Discussion Select an answer first