In OpenVAS, what does the CVSS score of a vulnerability primarily indicate?

The severity of the vulnerability

The likelihood that the vulnerability will be exploited

The time required to patch the vulnerability

A security analyst runs an OpenVAS scan against a network segment and receives a report with hundreds of findings. The analyst needs to prioritize remediation efforts. Which approach is most effective for prioritizing the findings?

Filter the findings by 'Exploitable' status and remediate only those that have known exploits.

Combine CVSS score, exploitability, asset criticality, and exposure to create a risk-based priority.

Group the findings by host and remediate the host with the most vulnerabilities first.

Sort the findings by CVSS score and remediate the highest scores first.

What is a common technique to reduce false positives in Snort alerts?

Refining rule thresholds and using pass rules

LPIC-3 Security

Domain 4Objective 2

328.2 Network Intrusion Detection (weight: 4) LPIC-3-SECURITY Practice Questions (Page 5)

Part of the Topic 328: Network Security domain, which makes up ~27% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~9–16 in this domain), expect 2–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

Questions 21–25

21foundation · easy
In OpenVAS, what does the CVSS score of a vulnerability primarily indicate?
Select an answer first
22application · medium
A security analyst runs an OpenVAS scan against a network segment and receives a report with hundreds of findings. The analyst needs to prioritize remediation efforts. Which approach is most effective for prioritizing the findings?
Select an answer first
23foundation · easy
Which metric is commonly used to measure the percentage of available network bandwidth that is being consumed at a given time?
Select an answer first
24foundation · easy
Which Snort command-line option is used to specify the network interface to listen on?
Select an answer first
25foundation · easy
What is a common technique to reduce false positives in Snort alerts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

328.2 Network Intrusion Detection (weight: 4) LPIC-3-SECURITY Practice Questions (Page 5)

Questions 21–25

In OpenVAS, what does the CVSS score of a vulnerability primarily indicate?

A security analyst runs an OpenVAS scan against a network segment and receives a report with hundreds of findings. The analyst needs to prioritize remediation efforts. Which approach is most effective for prioritizing the findings?

Which metric is commonly used to measure the percentage of available network bandwidth that is being consumed at a given time?

Which Snort command-line option is used to specify the network interface to listen on?

What is a common technique to reduce false positives in Snort alerts?

Keep studying — Topic 328: Network Security