CVA Vulnerability Assessment Tools & Techniques 3

Question 1

Which technique involves sending packets with unusual flag combinations (e.g., all flags set) to elicit responses that reveal firewall or OS behavior?

Accepted Answer

Xmas scan

Answer

An Xmas scan sets FIN, PSH, and URG flags simultaneously; RFC-compliant closed ports respond with RST while open ports remain silent, helping map firewall rules.

Question 2

A security team wants to discover all assets on a network before scanning for vulnerabilities. Which process describes this step?

Accepted Answer

Asset discovery / enumeration

Answer

Asset discovery (enumeration) identifies all live hosts, IP addresses, and services on the network before vulnerability scanning begins.

Question 3

What is the role of the Common Vulnerability Scoring System (CVSS) in vulnerability assessment?

Accepted Answer

Providing a standardized numerical score reflecting vulnerability severity

Answer

CVSS provides a standardized framework with a 0–10 score that quantifies the severity of a vulnerability based on exploitability, impact, and environmental factors.

Question 4

Which Nessus feature allows policies to be saved and reused across multiple scans to ensure consistency?

Accepted Answer

Scan templates

Answer

Scan templates in Nessus store pre-configured settings including credentials, plugin selections, and targets so the same policy can be applied consistently to future scans.

Question 5

During a vulnerability assessment, an assessor identifies a CVE with a CVSS base score of 9.8. How should this finding be prioritized?

Accepted Answer

Critical priority — remediate immediately or apply compensating controls

Answer

A CVSS base score of 9.8 is rated Critical (9.0–10.0), indicating high exploitability and impact, requiring immediate attention and remediation.

(CVA) Certified Vulnerability Assessor Practice Test

(CVA) Certified Vulnerability Assessor Practice Test

CVA Vulnerability Assessment Tools & Techniques 3