VM Quiz

Which step of the vulnerability management lifecycle performs fixes through software patches and approved upgrades?

• Discovery

• Reporting

• Remediation

• Assessment

What term describes an actual vulnerability that exists, but was NOT detected?

• False Positives

• False Negative

Which step of the vulnerability management lifecycle includes summary of findings and remediations?

• Discovery

• Reporting

• Remediation

• Assessment

Which step of the vulnerability management lifecycle includes identifying areas of responsibility and system criticality?

• Prioritize Assets

• Reporting

• Remediation

• Assessment

What term describes a situation where a vulnerability is identified, but does NOT reflect a threat to your organization?

• False Positives

• False Negative

Which option is NOT a software used for Vulnerability Management?

• OpenVAS

• Nessus Enterprise

• CVSS

• Security Onion

This open standard provides a reference method for publicly known information-security vulnerabilities and exposures

• CCE

• OVAL

• CPE

• CVE

Which is NOT a type of security access control?

• Physical

• Special

• Logical

• Administrative

What is the scoring system used for assessing the severity of computer system security vulnerabilities?

• CVE

• NIST

• CVSS

• SCAP

What is another term for active monitoring?

• Synthetic

• Reactive

• Passive

• Span-based