Module 5 - Vulnerability Analysis

Question 1

Vulnerability Assessment Concepts:

A system that is configured to stardard that I create an image of and use it to compare all other systems on the network.

Answer 1

Baseline

Question 2

Vulnerability Assessment Solutions:

Find a way to get the job done with out costing additional money or extra steps.

Answer 2

Workarounds

Question 3

Vulnerability Accessment Concepts:

An examination of the ability of a system or application, including current security procedures and controls, to withstand assault.

a. Active Assessment
b. Vulnerability Assessment
c. Network Assessment
d. Application Assessment

Answer 3

b. Vulnerability Assessment

Question 4

Vulnerability Scoring Systems:

• Is a publicly available and free to use list of dictionary of starndardized identifiers for common software vulnerabilities and exposures.
• A basis for evaluation among services, tools, and databases.
  a. CVE (Common Vulnerabilities and Exposures)
  b. CVAS (Common Vulnerability Assessment Solutions)
  c. CVAT (Common Vulnerability Assessment Tools)

Answer 4

a. CVE (Common Vulnerabilities and Exposures)

Question 5

Vulnerability Assessment Tools:

Lets administrators scan local and remote systems for missing security updates as well as common security misconfigurations.

a. Qualys FreeScan
b. Nikto
c. SAINT
d. MBSA (Microsoft Baseline Security Analyzer)

Answer 5

d. MBSA (Microsoft Baseline Security Analyzer)

Question 6

Vulnerability Scoring Systems:

All of the following are severity levels of CVSS v3.0 except: (Choose 2)

a. Low
b. High
c. Critical
d. None
e. Medium
f. Extreme
g. Warning

Answer 6

f. Extreme
g. Warning

Question 7

Vulnerability Scoring Systems:

What are the CVSS v2.0 Severity Level:

a. Critical
b. High
c. Low
d. None
e. Medium

Answer 7

b. High
c. Low
e. Medium

Question 8

Vulnerability Scoring Systems:

CVSS v2.0, what is the Base Score for the Medium severity level?

a. 0.0-3.9
b. 7.0-10
c. 4.0-6.9

Answer 8

c. 4.0-6.9

Question 9

Vulnerability Scoring Systems:

CVSS v3.0, What is the Base Score for the High severity level.

a. 9.0-10
b. 0.0
c. 4.0-6.9
d. 7.0-8.9
e. 0.1-3.9

Answer 9

d. 7.0-8.9