Sec+ - 8D - Vulnerability Analysis and Remediation

What term is commonly used to describe up-to-date information about known vulnerabilities?

• Vulnerability updates
  

• Patch management

• Vulnerability feeds

• Security protocols

Which organization maintains the National Vulnerability Database (NVD)?

• National Institute of Standards and Technology (NIST)
  

• National Security Agency (NSA)
  

• Federal Bureau of Investigation (FBI)
  

• Cybersecurity and Infrastructure Security Agency (CISA)

  
  

What protocol facilitates the distribution of vulnerability feeds and defines common identifiers for vulnerabilities?

• Common Vulnerability Scoring System (CVSS)
  

• Security Content Automation Protocol (SCAP)
  

• National Vulnerability Database (NVD)
  

• Common Vulnerabilities and Exposures (CVE)

  
  

Which dictionary provides identifiers, descriptions, reference URLs, and creation dates for vulnerabilities?

• Common Vulnerabilities and Exposures (CVE)
  

• Common Vulnerability Scoring System (CVSS)
  

• National Vulnerability Database (NVD)
  

• Security Content Automation Protocol (SCAP)

  
  

What system assigns scores from 0 to 10 to vulnerabilities based on their characteristics?

• Common Vulnerability Scoring System (CVSS)
  

• Common Vulnerabilities and Exposures (CVE)
  

• National Vulnerability Database (NVD)
  

• Security Content Automation Protocol (SCAP)

  
  

What term refers to instances where a vulnerability scanner incorrectly identifies a vulnerability?

• True positives

• False positives

• True negatives

• False negatives

Which practice involves dividing a network into separate segments to contain potential security breaches?

• Patching

• Cybersecurity insurance

• Segmentation

• Compensating controls

What process involves performing additional vulnerability scans after remediation actions have been implemented?

• Re-scanning

• Auditing

• Verification

• Validation

What term describes the level of risk an organization is willing to accept?

• Risk assessment

• Risk tolerance

• Risk management

• Risk mitigation

Which organization maintains the Common Vulnerability Scoring System (CVSS)?

• National Institute of Standards and Technology (NIST)
  

• National Security Agency (NSA)
  

• Forum of Incident Response and Security Teams (FIRST)
  

• Cybersecurity and Infrastructure Security Agency (CISA)