Chapter 5 Review

Another word for Vulnerability is ______

• weakness

• attack

• protection

• asset

What is this called?​

• Vulnerability Life Cycle
• Attack Life Cycle
• Risk Management Life Cycle
• Hacker Research Life Cycle

______ is used to detect new vulnerabilities as they arise and then implement a remediation workflow that addresses the highest-priority vulnerabilities.

• Patch Scanning

• Legacy Scanning

• Vulnerability Scanning

• Error Scanning

What is this a picture of?

• Vulnerabilities map

• Employee map

• Asset map

Administrators should configure these scans to provide automated alerting when they detect new vulnerabilities. Which company's Scan Report was used as an example in the curriculum?

• Nessux

• Qualys

• Nessus

• Qualicort

______, such as those imposed by the Payment Card Industry Data Security Standard (PCI DSS) or the Federal Information Security Modernization Act (FISMA), may dictate a minimum frequency for vulnerability scans.

• Technical Constraints

• Regulatory Requirements

• Business Constraints

• Licensing Limitations

______, may limit the organization from conducting resource-intensive vulnerability scans during periods of high business activity to avoid disruption of critical processes.

• Technical Constraints

• Regulatory Requirements

• Business Constraints

• Licensing Limitations

______, may curtail the bandwidth consumed by the scanner or the number of scans that may be conducted simultaneously.

• Technical Constraints

• Regulatory Requirements

• Business Constraints

• Licensing Limitations

______, may limit the frequency of scanning. For example, the scanning system may only be capable of performing a certain number of scans per day, and organizations may need to adjust scan frequency to ensure that all scans complete successfully.

• Technical Constraints

• Regulatory Requirements

• Business Constraints

• Licensing Limitations

Administrators can provide the scanner with credentials that allow the scanner to connect to the target server and retrieve configuration information.

• True

• False