CVA Vulnerability Assessment Tools & Techniques 2

Question 1

Which Nmap scan type sends a SYN packet and waits for a SYN-ACK without completing the three-way handshake?

Accepted Answer

SYN stealth scan (-sS)

Answer

SYN stealth scan (-sS) sends a SYN packet and tears down the connection after receiving SYN-ACK, leaving no completed TCP session in logs.

Question 2

What is the primary purpose of the Metasploit Framework's 'auxiliary' modules?

Accepted Answer

Scanning, fuzzing, and information gathering without exploitation

Answer

Auxiliary modules perform support tasks such as scanning, fuzzing, sniffing, and banner grabbing without launching an exploit against a target.

Question 3

A vulnerability assessor needs to identify open ports on a target that blocks ICMP. Which Nmap technique is MOST appropriate?

Accepted Answer

TCP SYN scan with ICMP disabled (-Pn)

Answer

Using -Pn tells Nmap to skip host discovery and scan ports directly, bypassing ICMP-blocking firewalls.

Question 4

Which tool is specifically designed to identify web application vulnerabilities such as SQL injection and XSS through automated crawling?

Accepted Answer

Nikto

Answer

Nikto is an open-source web server scanner that tests for dangerous files, misconfigurations, and common web vulnerabilities including SQL injection and XSS.

Question 5

In the context of vulnerability scanning, what does a 'false positive' result mean?

Accepted Answer

The scanner reports a vulnerability that does not actually exist

Answer

A false positive occurs when a scanner flags a condition as a vulnerability when the system is not actually vulnerable, requiring manual verification.

(CVA) Certified Vulnerability Assessor Practice Test

(CVA) Certified Vulnerability Assessor Practice Test

CVA Vulnerability Assessment Tools & Techniques 2