Chapter 4 Flashcards
Ryan is conducting a penetration test and is targeting a database server. Which one of the following tools would best assist him in detecting vulnerabilities on that server?
A. Nessus
B. Nikto
C. SQLmap
D. OpenVAS
C. SQLmap
Gary is conducting a black-box penetration test against an organization and is being
provided with the results of vulnerability scans that the organization already ran for use
in his tests. Which one of the following scans is most likely to provide him with helpful
information within the bounds of his test?
A. Stealth internal scan
B. Full internal scan
C. Stealth external scan
D. Full external scan
D. Full external scan
What tool can white-box penetration testers use to help identify the systems present on a network prior to conducting vulnerability scans?
A. Asset inventory
B. Web application assessment
C. Router
D. DLP
A. Asset inventory
Tonya is configuring vulnerability scans for a system that is subject to the PCI DSS compliance standard. What is the minimum frequency with which she must conduct scans?
A. Daily
B. Weekly
C. Monthly
D. Quarterly
D. Quarterly
Which one of the following is not an example of a vulnerability scanning tool?
A. Qualys
B. Snort
C. Nessus
D. OpenVAS
B. Snort
Which one of the following technologies, when used within an organization, is the least likely
to interfere with vulnerability scanning results achieved by external penetration testers?
A. Encryption
B. Firewall
C. Containerization
D. Intrusion prevention system
A. Encryption
Renee is configuring her vulnerability management solution to perform credentialed scans of
servers on her network. What type of account should she provide to the scanner?
A. Domain administrator
B. Local administrator
C. Root
D. Read-only
D. Read-only
Jason is writing a report about a potential security vulnerability in a software product and
wishes to use standardized product names to ensure that other security analysts understand
the report. Which SCAP component can Jason turn to for assistance?
A. CVSS
B. CVE
C. CPE
D. OVAL
C. CPE
Ken is planning to conduct a vulnerability scan of an organization as part of a penetration
test. He is conducting a black-box test. When would it be appropriate to conduct an internal
scan of the network?
A. During the planning stage of the test
B. As soon as the contract is signed
C. After receiving permission from an administrator
D. After compromising an internal host
D. After compromising an internal host
Which type of organization is the most likely to be impacted by a law requiring them to conduct vulnerability scans?
A. Bank
B. Hospital
C. Government agency
D. Doctor’s office
C. Government agency
Which one of the following categories of systems is most likely to be disrupted during a vulnerability scan?
A. External web server
B. Internal web server
C. IoT device
D. Firewall
C. IoT device
What term describes an organization’s willingness to tolerate risk in their computing
environment?
A. Risk landscape
B. Risk appetite
C. Risk level
D. Risk adaptation
B. Risk appetite
Which one of the following factors is least likely to impact vulnerability scanning schedules?
A. Regulatory requirements
B. Technical constraints
C. Business constraints
D. Staff availability
D. Staff availability
Adam is conducting a penetration test of an organization and is reviewing the source code of
an application for vulnerabilities. What type of code testing is Adam conducting?
A. Mutation testing
B. Static code analysis
C. Dynamic code analysis
D. Fuzzing
B. Static code analysis
Ryan is planning to conduct a vulnerability scan of a business-critical system using dangerous
plug-ins. What would be the best approach for the initial scan?
A. Run the scan against production systems to achieve the most realistic results possible.
B. Run the scan during business hours.
C. Run the scan in a test environment.
D. Do not run the scan to avoid disrupting the business
C. Run the scan in a test environment.
