Enpoint Vulnerability Quiz

Question 1

In profiling a server, what defines what an application is allowed to do or run on a server?

Answer 1

Service accounts

Question 2

In network security assessments, which type of test is used to evaluate the risk posed by vulnerabilities to a specific organization including assessment of the likelihood of attacks and the impact of successful exploits on the organization?

Answer 2

Vulnerability assessment

Question 3

When a network baseline is being established for an organization, which network profile element indicates the time between the establishment of a data flow and its termination?

Answer 3

Session duration

Question 4

Which type of evaluation includes the assessment of the likelihood of an attack, the type of threat actor likely to perpetrate such an attack, and what the consequences could be to the organization if the exploit is successful?

Answer 4

Risk Analysis

Question 5

A cybersecurity analyst is performing a CVSS assessment on an attack where a web link was sent to several employees. Once clicked, an internal attack was launched. Which CVSS Base Metric Group Exploitability metric is used to document that the user had to click on the link in order for the attack to occur?

Answer 5

User Interaction

Question 6

Which metric class in the CVSS Basic Metric Group identifies the impacts on confidentiality, integrity, and availability?

Answer 6

impact

Question 7

Which metric in the CVSS Base Metric Group is used with an attack vector?

Answer 7

the proximity of the threat actor to the vulnerability

Question 8

Which statement describes the threat-vulnerability (T-V) pairing?

Answer 8

It is the identification of threats and vulnerabilities and the matching of threats with vulnerabilities.

Question 9

In addressing an identified risk, which strategy aims to shift some of the risk to other parties?

Answer 9

Risk Sharing

Question 10

Which step in the Vulnerability Management Life Cycle categorizes assets into groups or business units, and assigns a business value to asset groups based on their criticality to business operations?

Answer 10

prioritise assets

Question 11

What is an action that should be taken in the discovery step of the vulnerability management life cycle?

Answer 11

developing a network baseline