SYO 701 VULNERABILITY SCAN / MANAGEMENT Module FC

Front

41. Which of the following is used to quantitatively measure the criticality of a vulnerability?

Back

B. CVSS

Front

50. A security practitioner completes a vulnerability assessment on a company's network and finds several vulnerabilities, which the operations team remediates. Which of the following should be done next?

Back

C. Rescan the network.

Front

54. 54. After a recent vulnerability scan, a security engineer needs to harden the routers within the corporate network. Which of the following is the most appropriate to disable?

Back

D. Web-based administration

Front

65. A small business uses kiosks on the sales floor to display product information for customers. A security team discovers the kiosks use end-of-life operating systems. Which of the following is the security team most likely to document as a security implication of the current architecture?

Back

A. Patch availability

Front

66. After reviewing the following vulnerability scanning report:

Server:192.168.14.6

Service: Telnet

Port: 23 Protocol: TCP

Status: Open Severity: High

Vulnerability: Use of an insecure network protocol

A security analyst performs the following test:

nmap -p 23 192.168.14.6 --script telnet-encryption

PORT STATE SERVICE REASON

23/tcp open telnet syn-ack

telnet encryption: Telnet server supports encryption

Which of the following would the security analyst conclude for this reported vulnerability?

Back

A. It is a false positive.

Front

72. Which of the following is a hardware-specific vulnerability?

Back

A. Firmware version

Front

87. Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?

Back

A. A full inventory of all hardware and software

Front

104. One of a company's vendors sent an analyst a security bulletin that recommends a BIOS update. Which of the following vulnerability types is being addressed by the patch?

Back

B. Firmware

Front

187. A legacy device is being decommissioned and is no longer receiving updates or patches. Which of the following describes this scenario?

Back

C. End of support

Front

202. Which of the following most impacts an administrator's ability to address CVEs discovered on a server?

Back

B. Patch availability