Vulnerability Assessment CCOA Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   When a vulnerability cannot be immediately patched, which of the following is an appropriate interim remediation measure?

   • ADisabling the system's antivirus to improve performance
   • BIncreasing the verbosity of system logs
   • CImplementing a compensating control such as a firewall rule to block access
   • DWaiting for the vulnerability to be publicly disclosed before acting
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An analyst is performing a vulnerability assessment of a new web application. The analyst has already run an automated scanner and found several potential SQL injection points. To confirm these findings and reduce false positives, what should the analyst do next?

   • AManually verify each potential SQL injection by sending crafted payloads and observing the application's response
   • BRun the same scanner again with default settings to see if the results change
   • CDisable the web application firewall to ensure the scanner can test all inputs
   • DImmediately report the SQL injection findings to the development team for remediation
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A vulnerability scan identifies a critical vulnerability in a third-party application. The vendor has released a patch, but the patch is known to cause compatibility issues with the organization's custom integrations. The analyst must decide how to proceed. What is the best course of action?

   • AAsk the vendor to provide a custom patch that does not have compatibility issues
   • BDo not apply the patch and instead implement compensating controls
   • CApply the patch immediately and deal with any compatibility issues later
   • DTest the patch in a staging environment that mirrors the production setup, then schedule the patch during a maintenance window
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A security analyst must identify vulnerabilities in a web application that uses a custom login form and an API endpoint. The analyst has network-level scan results showing open ports and service versions, but needs to detect application-layer issues such as SQL injection and cross-site scripting. Which approach should the analyst use?

   • ARun an authenticated vulnerability scan against the web server with the application's service account.
   • BPerform a manual review of the source code for hardcoded credentials.
   • CUse a web application scanner configured to crawl the login form and API endpoints.
   • DRun a network vulnerability scanner with a larger port range to discover additional services.
   Reveal Solution Discussion Select an answer first