CySA+ Test Vulnerability Management 4

Question 1

A penetration tester uses exploitation to confirm that a vulnerability scanner finding is truly exploitable. How does this differ from a vulnerability assessment?

Accepted Answer

Penetration testing actively exploits vulnerabilities to confirm impact, while vulnerability assessment identifies and reports potential weaknesses

Answer

Penetration testing goes beyond identification by attempting to exploit vulnerabilities to demonstrate real-world impact, whereas vulnerability assessments enumerate and rate findings without exploitation.

Question 2

Which vulnerability management lifecycle phase involves verifying that applied patches or configuration changes successfully closed the identified vulnerability?

Accepted Answer

Validation

Answer

Validation (verification) involves rescanning or retesting after remediation to confirm the vulnerability is no longer present.

Question 3

An analyst notices that the vulnerability scanner is flagging a particular finding on a host every week despite a patch being applied a month ago. What should the analyst suspect?

Accepted Answer

The patch was not successfully applied or was rolled back

Answer

Persistent findings after patching most commonly indicate the patch did not apply correctly, was reverted, or the scan is targeting a different instance of the software.

Question 4

Which of the following BEST describes the concept of 'attack surface reduction' as a vulnerability management strategy?

Accepted Answer

Eliminating unnecessary services, ports, and software to minimize the number of exploitable entry points

Answer

Attack surface reduction removes unused services, disables default accounts, and uninstalls unnecessary software to shrink the number of vectors an attacker can leverage.

Question 5

When assessing vulnerabilities in a cloud IaaS environment, which responsibility typically remains with the customer rather than the cloud provider?

Accepted Answer

Guest OS and application-level vulnerabilities

Answer

Under the shared responsibility model in IaaS, the customer owns the guest OS, middleware, and applications — including patching them for vulnerabilities.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test Vulnerability Management 4