CSS CSS Vulnerability Management & Penetration Testing 2 — Questions and Answers
Question 1: What is the primary purpose of a bug bounty program?
- Incentivizes security researchers to responsibly disclose vulnerabilities in exchange for rewards (Correct answer)
- Hires full-time security testers as employees
- Automates vulnerability scanning of web applications
- Pays attackers to stop ongoing intrusions
Correct answer: Incentivizes security researchers to responsibly disclose vulnerabilities in exchange for rewards
Bug bounty programs leverage the broader security research community to identify vulnerabilities that internal teams might miss, creating a responsible disclosure channel.
Question 2: Which type of penetration test is conducted without any prior knowledge of the target environment?
- Black-box testing (Correct answer)
- White-box testing
- Gray-box testing
- Red team exercise
Correct answer: Black-box testing
Black-box testing simulates an external attacker with no insider knowledge, testing the organization's defenses from the attacker's perspective.
Question 3: What is the OWASP Top 10 used for in application security?
- A regularly updated list of the most critical web application security risks (Correct answer)
- The top 10 most expensive security tools
- A list of the 10 most common network protocols
- A ranking of the most skilled penetration testers
Correct answer: A regularly updated list of the most critical web application security risks
The OWASP Top 10 documents the most prevalent and impactful web application vulnerabilities, serving as a baseline for secure development and security testing.
Question 4: What is the risk-based approach to vulnerability prioritization?
- Prioritizes remediation based on the combination of vulnerability severity, asset criticality, and exploitability (Correct answer)
- Patches all vulnerabilities in alphabetical order by CVE ID
- Remediates only critical CVSS-rated vulnerabilities
- Addresses vulnerabilities only after they are actively exploited
Correct answer: Prioritizes remediation based on the combination of vulnerability severity, asset criticality, and exploitability
Risk-based prioritization considers not just CVSS score but also how critical the affected asset is and whether active exploits exist, ensuring limited resources focus on the highest-risk items first.
Question 5: Which tool is commonly used by penetration testers for network discovery and security auditing?
- Nmap (Network Mapper) (Correct answer)
- Wireshark only
- Metasploit only
- Burp Suite only
Correct answer: Nmap (Network Mapper)
Nmap is a widely used open-source tool for network discovery that identifies live hosts, open ports, services, and operating system details.
Question 6: What is vulnerability chaining in the context of penetration testing?
- Combining multiple lower-severity vulnerabilities to achieve a higher-impact attack outcome (Correct answer)
- Linking multiple vulnerability scanners together
- Scheduling vulnerability scans in sequence
- Grouping vulnerabilities by CVE ID for reporting
Correct answer: Combining multiple lower-severity vulnerabilities to achieve a higher-impact attack outcome
Vulnerability chaining exploits multiple weaknesses in sequence — none of which individually would allow a critical breach — to achieve a high-impact result such as remote code execution.
CSS CSS Vulnerability Management & Penetration Testing 2
What is the primary purpose of a bug bounty program?