5A: Plan the Vulnerability Scan

Question 1

The points at which a network or application receive external connections or inputs/outputs that are potential vectors to be exploited by a threat actor.

Answer 1

Attack Vectors

Question 2

A process that moves from initial discovery of a vulnerability, through mitigation, management, awareness, and documentation.

Answer 2

Vulnerability Lifecycle

Question 3

A technique used during reconnaissance to gather information about network hosts and the services running on open ports.

Answer 3

Banner Grabbing

Question 4

A command line utility to download files via HTTP from a web site.

Answer 4

wget or curl

Question 5

Utility for reading and writing raw data over a network connection.

Answer 5

netcat

Question 6

IP and port scanner used for topology, host, service, and OS discovery and enumeration.

Answer 6

nmap

Question 7

Open source vulnerability scanner, originally developed from the Nessus codebase at the point where Nessus became commercial software.

Answer 7

OpenVAS