A security team runs an OpenVAS scan against a DMZ host. The scan completes, but the report shows only a few low-severity findings, while the team knows the host runs an outdated Apache version with known critical vulnerabilities. The scan was configured with 'Scan Targets' using the host's IP and default port list. What is the most likely reason for the missing findings?

The NVT feed is outdated and does not include the latest Apache vulnerability checks.

The scan configuration is set to 'Discovery' only, which does not run vulnerability tests.

The scan target is incorrect; the team should have scanned the hostname instead of the IP address.

The scan was run without credentials, so OpenVAS could not perform authenticated checks that detect version-specific vulnerabilities.

What is the primary purpose of NASL (Nessus Attack Scripting Language)?

To configure network interfaces for scanning

To write custom vulnerability checks

Which Snort mode is used to analyze network traffic in real time and generate alerts based on rules?

Network intrusion detection mode

LPIC-3 Security

Domain 4Objective 2

328.2 Network Intrusion Detection (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 11–15

11expert · hard
A security team runs an OpenVAS scan against a DMZ host. The scan completes, but the report shows only a few low-severity findings, while the team knows the host runs an outdated Apache version with known critical vulnerabilities. The scan was configured with 'Scan Targets' using the host's IP and default port list. What is the most likely reason for the missing findings?
Select an answer first
12foundation · easy
Which OpenVAS feature allows you to schedule scans to run automatically at regular intervals?
Select an answer first
13foundation · easy
In a Snort rule, which part of the rule header specifies the source and destination IP addresses and ports?
Select an answer first
14foundation · easy
What is the primary purpose of NASL (Nessus Attack Scripting Language)?
Select an answer first
15foundation · easy
Which Snort mode is used to analyze network traffic in real time and generate alerts based on rules?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.2 Network Intrusion Detection (weight: 4) LPIC-3-SECURITY Practice Questions (Page 3)

Questions 11–15

Which OpenVAS feature allows you to schedule scans to run automatically at regular intervals?

In a Snort rule, which part of the rule header specifies the source and destination IP addresses and ports?

What is the primary purpose of NASL (Nessus Attack Scripting Language)?

Which Snort mode is used to analyze network traffic in real time and generate alerts based on rules?

Keep studying — Topic 328: Network Security