Vulnerability Analysis

Which of the following is a vulnerability assessment tool?

• Aircrack-ng

• Nessus

• John the Ripper

• Cain & Abel

You are a consultant for an IT company. Your boss asks you to determine the topology of the network. What is the best device to use in this circumstance?

• Network mapper

• Protocol analyzer

• Port scanner

• Vulnerability scanner

What is the best action to take when you conduct a corporate vulnerability assessment?

• Document your scan results for the change control board

• Examine vulnerability data with a network sniffer

• Update systems

• Organize based on severity and asset value

Why would a security administrator use a vulnerability scanner? (Select the best answer?

• To identify remote access policies

• To analyze protocols

• To map the network

• To find open ports on a server

Which of the following can you use as a foundation when building a vulnerability assessment report?

• Tools

• Nmap

• Salami

• SQL Injection

What is CVSSv2?

• Latest version of the CVE

• Latest version of CVS

• Latest version of SANS Top 20 controls

• None of these

CWE refers to ?

• common weakness enumeration

• common weakness exposures

• common vulnerability scoring system

• common weakness explanation

serverity of medium vulnerability lies in b/w ?

• 0.1 to 3.9

• 4.0 to 6.9

• 7.0 to 8.9

• 9.0 to 10

What is the third phase of vulnerability management life cycle ?

• Identify assets

• Risk Assessment

• Vulnerability Scan

• Verfication

In which phase Risk Assessment is counted ?

• Pre-assessment phase

• Vulnerability Assessment phase

• Post assessment phase

• None of these