3.3 - Perform Security Assessments and Vulnerability Management Activities SSCP Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is a key element of an effective vulnerability report?

   • AThe exact cost of remediation.
   • BA risk rating for each vulnerability.
   • CA list of all employees who have access to the system.
   • DThe name of the person who discovered the vulnerability.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary goal of vulnerability analysis?

   • ATo prioritize vulnerabilities based on exploitability, impact, and asset criticality.
   • BTo assign blame for vulnerabilities.
   • CTo identify vulnerabilities without considering their context.
   • DTo automatically remediate all vulnerabilities.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which security testing method is primarily focused on actively exploiting vulnerabilities to determine the real-world impact of a compromise?

   • AVulnerability scanning
   • BConfiguration review
   • CSecurity audit
   • DPenetration testing
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary purpose of a supplier risk review?

   • ATo ensure that third-party vendors' security posture aligns with the organization's requirements.
   • BTo transfer all security responsibilities to the vendor.
   • CTo guarantee that the vendor will never suffer a security breach.
   • DTo negotiate the lowest possible price for services.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which of the following is an example of a design-level security weakness that an architecture risk review might identify?

   • AAn employee who uses a weak password.
   • BA network architecture that places the database server on the same subnet as the public-facing web server.
   • CA firewall rule that is misconfigured.
   • DA web server that is missing a critical security patch.
   Reveal Solution Discussion Select an answer first