Vulnerability Assessment and Penetration Testing

What is the primary purpose of Vulnerability Assessment (VA)?

• Exploiting systems

• Identifying and classifying security weaknesses

• Writing malware

• Bypassing firewalls

Which tool is introduced in Unit 1 for vulnerability scanning?

• Metasploit

• Nessus

• Wireshark

• Nmap

What is a key step after scanning in VA?

• Deleting logs

• False positive analysis

• Formatting the system

• Ignoring minor vulnerabilities

Which phase involves exploiting identified vulnerabilities?

• Scan configuration

• Report interpretation

• Vulnerability analysis

• Policy configuration

What is the main goal of Penetration Testing (PT)?

• Only identifying vulnerabilities

• Simulating attacks to exploit vulnerabilities

• Installing antivirus software

• Writing security policies

Which framework is introduced for penetration testing in Unit 2?

• Burp Suite

• Metasploit

• Nessus

• Snort

What is Shodan used for in PT?

• Password cracking

• Finding internet-connected devices

• Encrypting data

• Social engineering

Which activity is part of information gathering in PT?

• Formatting hard drives

• Password sniffing

• Deleting files

• Installing malware

What is the purpose of post-exploitation modules in Metasploit?

• To delete the target system

• To maintain access and gather data

• To encrypt all files

• To uninstall antivirus

Which tool is used for client-side attacks in Metasploit?

• Nmap

• SET (Social Engineering Toolkit)

• Wireshark

• John the Ripper