Vulnerability Assessment Tools & Techniques Flashcards

Which vulnerability assessment approach tests systems from an attacker's external perspective without prior knowledge of internal architecture?

Answer: Black-box assessment

Black-box assessments simulate an external attacker with no prior knowledge of the target environment, testing defenses from the outside.

What is the purpose of 'banner grabbing' in vulnerability assessment?

Answer: Collecting service version information from open ports to identify vulnerable software

Banner grabbing retrieves version strings and software identifiers from running services, allowing assessors to match them against known vulnerability databases.

A CVA candidate is comparing OpenVAS and Nessus. Which statement BEST describes OpenVAS?

Answer: OpenVAS is an open-source vulnerability scanner derived from an older version of Nessus

OpenVAS (Open Vulnerability Assessment System) is a free, open-source fork of Nessus that was released when Nessus transitioned to a proprietary license in 2005.

Which method can help reduce scan noise and improve accuracy when assessing a large enterprise network?

Answer: Segmenting scans by subnet and scheduling during off-peak hours

Segmenting scans by subnet and scheduling during low-traffic periods reduces network impact, avoids triggering rate limits, and produces cleaner, more manageable results.

What does the term 'attack surface' mean in vulnerability assessment?

Answer: The total set of points where an attacker can try to enter or extract data from a system

Attack surface encompasses all entry points, interfaces, and exposed components that an attacker could potentially exploit to compromise a system.

Which Qualys feature enables continuous monitoring of an organization's internet-facing assets for vulnerabilities?

Answer: Qualys VMDR (Vulnerability Management, Detection and Response)

Qualys VMDR provides continuous discovery, assessment, prioritization, and remediation tracking for vulnerabilities across an organization's entire asset inventory.

Why is it important to define a clear scope before beginning a vulnerability assessment?

Answer: To prevent unauthorized scanning of out-of-scope systems and potential legal liability

A well-defined scope establishes boundaries that protect the assessor from legal liability and prevents disruption to systems not authorized for testing.