CREST Security & Vulnerability Management 3

Question 1

Which vulnerability scanning technique involves providing valid credentials to the scanner to enumerate installed software versions?

Accepted Answer

Credentialed (authenticated) scanning

Answer

Credentialed scanning allows the scanner to log in and inspect installed packages, registry entries, and configurations, producing far more accurate results than unauthenticated scans.

Question 2

A CREST-certified tester receives a finding about an open redirect vulnerability. Under OWASP categorization, which category best fits this issue?

Accepted Answer

Unvalidated Redirects and Forwards

Answer

Unvalidated Redirects and Forwards is the OWASP category that covers open redirect vulnerabilities, where an application can redirect users to untrusted URLs.

Question 3

In patch management, what is the difference between a hotfix and a service pack?

Accepted Answer

A hotfix addresses a specific urgent issue; a service pack is a collection of patches bundled together

Answer

Hotfixes are rapid, targeted fixes for specific critical issues, while service packs aggregate multiple previously released patches into a single installable update.

Question 4

When prioritizing vulnerabilities, which combination of factors from CVSS and business context is MOST appropriate?

Accepted Answer

CVSS base score plus asset criticality and exploitability in the wild

Answer

Effective prioritization combines the CVSS base score with environmental factors such as asset business value and evidence of active exploitation to focus remediation effort.

Question 5

Which framework classifies adversary tactics and techniques and is widely used to map vulnerabilities to real-world attacker behavior?

Accepted Answer

MITRE ATT&CK

Answer

MITRE ATT&CK provides a structured taxonomy of adversary tactics and techniques based on real-world observations, enabling threat-informed vulnerability prioritization.

(CREST) Council for Registered Ethical Security Testers Practice Test

(CREST) Council for Registered Ethical Security Testers Practice Test

CREST Security & Vulnerability Management 3