CDP Threat Modeling & Vulnerability Management 2

Question 1

What is the scoring range for CVSS (Common Vulnerability Scoring System) base scores?

Accepted Answer

0.0 to 10.0

Answer

CVSS base scores range from 0.0 to 10.0, with 10.0 representing the most severe vulnerabilities requiring the most urgent remediation.

Question 2

What does CVE stand for in the context of vulnerability management?

Accepted Answer

Common Vulnerabilities and Exposures

Answer

CVE (Common Vulnerabilities and Exposures) is a standardized list of publicly known security vulnerabilities maintained by MITRE Corporation.

Question 3

Which open-source tool is widely used in DevSecOps pipelines to scan container images for known vulnerabilities?

Accepted Answer

Trivy

Answer

Trivy, developed by Aqua Security, is a comprehensive open-source vulnerability scanner for containers, filesystems, IaC, and code repositories commonly integrated into CI/CD pipelines.

Question 4

What is the key difference between Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)?

Accepted Answer

SAST analyzes source code without executing it while DAST tests running applications

Answer

SAST analyzes source code, bytecode, or binaries without executing the application (white-box), while DAST tests the application in its running state from the outside (black-box).

Question 5

What is the National Vulnerability Database (NVD) primarily used for in vulnerability management?

Accepted Answer

Enriching CVE records with CVSS severity scores and additional metadata

Answer

The NVD is a U.S. government repository managed by NIST that enriches CVE data with CVSS scores, CWE classifications, CPE applicability statements, and remediation guidance.

(CDP) Certified DevSecOps Professional Practice Test

(CDP) Certified DevSecOps Professional Practice Test

CDP Threat Modeling & Vulnerability Management 2